VIRY.CZ

Zdravim,
tady je log, jinak nevim proc mi bezi 70 procesu a pripada mi pocitac pomalejsi.
Dekuji

--------------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by martin at 2012-09-16 20:08:16
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 120 GB (50%) free of 238 GB
Total RAM: 3327 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:08:17, on 16.9.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Windows\system32\WTablet\Wacom_TabletUser.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\martin\Desktop\RSIT.exe
C:\Program Files\trend micro\martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;127.0.0.1:9421;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Google Update] "C:\Users\martin\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\martin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files\Stardock\Fences\FencesMenu.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DCPFLICS - Unknown owner - C:\Program Files\DCPFLICS\DCPFLICS.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\Windows\system32\dgdersvc.exe
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit (mi-raysat_3dsmax2011_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - Unknown owner - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TabletServiceWacom - Wacom Technology, Corp. - C:\Windows\system32\Wacom_Tablet.exe

--
End of file - 6524 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Profiles\tiatrvo9.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.com/ig"
prefs.js - "extensions.enabledItems" - "{4548ECB8-DA60-439A-A00D-5C893F8E1F9A}:1.0, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, foxmarks@kei.com:3.9.5, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... ource=2&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448]
"Description"=6.0.12.448
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{4548ECB8-DA60-439A-A00D-5C893F8E1F9A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsIQTScriptablePlugin.xpt
nsJSRealPlayerPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpjplug.dll
QuickTimePlugin.class

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seekapp179.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Profiles\tiatrvo9.default\searchplugins\
conduit.xml
youtube.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-02-27 59272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-30 7289376]
"00PCTFW"=C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2010-01-12 3168216]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-08-19 348664]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"AdobeCS6ServiceManager"=C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"Google Update"=C:\Users\martin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-10 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Akamai NetSession Interface]
C:\Users\martin\AppData\Local\Akamai\netsession_win.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
C:\Windows\system32\Macromed\Flash\FlashUtil11c_Plugin.exe [2011-10-18 247968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\martin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-10 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^martin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Paymo.lnk]
C:\PROGRA~1\Paymo\Paymo.exe [2010-12-13 434176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files\Stardock\Fences\FencesMenu.dll [2009-10-02 128360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"legalnoticetext"=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"vidc.XVID"=xvidvfw.dll
"vidc.x264"=C:\PROGRA~1\x264vfw\x264vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - "" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-09-16 20:02:45 ----D---- C:\rsit
2012-09-16 20:02:45 ----D---- C:\Program Files\trend micro
2012-09-10 21:40:23 ----D---- C:\Program Files\Mozilla Firefox
2012-09-05 21:43:11 ----RD---- C:\Program Files\Skype
2012-09-05 21:43:11 ----D---- C:\Program Files\Common Files\Skype
2012-08-19 11:18:36 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-19 11:18:36 ----A---- C:\Windows\system32\ieUnatt.exe
2012-08-19 11:18:36 ----A---- C:\Windows\system32\ieui.dll
2012-08-19 11:18:36 ----A---- C:\Windows\system32\iertutil.dll
2012-08-19 11:18:35 ----A---- C:\Windows\system32\wininet.dll
2012-08-19 11:18:35 ----A---- C:\Windows\system32\url.dll
2012-08-19 11:18:35 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-19 11:18:35 ----A---- C:\Windows\system32\jscript9.dll
2012-08-19 11:18:35 ----A---- C:\Windows\system32\jscript.dll
2012-08-19 11:18:34 ----A---- C:\Windows\system32\urlmon.dll
2012-08-19 11:18:33 ----A---- C:\Windows\system32\mshtml.dll
2012-08-19 11:18:33 ----A---- C:\Windows\system32\ieframe.dll
2012-08-19 11:18:32 ----A---- C:\Windows\system32\srcore.dll
2012-08-19 11:18:24 ----A---- C:\Windows\system32\win32k.sys
2012-08-19 11:18:17 ----A---- C:\Windows\system32\win32spl.dll
2012-08-19 11:18:17 ----A---- C:\Windows\system32\spoolsv.exe
2012-08-19 11:18:10 ----A---- C:\Windows\system32\netapi32.dll
2012-08-19 11:18:10 ----A---- C:\Windows\system32\browser.dll
2012-08-19 11:18:09 ----A---- C:\Windows\system32\browcli.dll
2012-08-19 11:18:08 ----A---- C:\Windows\system32\localspl.dll

======List of files/folders modified in the last 1 month======

2012-09-16 20:08:17 ----D---- C:\Windows\Temp
2012-09-16 20:05:34 ----SHD---- C:\System Volume Information
2012-09-16 20:03:25 ----D---- C:\Windows\system32\catroot
2012-09-16 20:03:23 ----D---- C:\Windows\winsxs
2012-09-16 20:02:45 ----RD---- C:\Program Files
2012-09-16 20:02:21 ----D---- C:\Windows\system32\catroot2
2012-09-16 20:00:45 ----D---- C:\Windows\system32\config
2012-09-16 19:54:14 ----AD---- C:\ProgramData\TEMP
2012-09-16 19:51:46 ----D---- C:\Users\martin\AppData\Roaming\Skype
2012-09-16 19:46:21 ----D---- C:\Users\martin\AppData\Roaming\WTablet
2012-09-16 19:46:15 ----D---- C:\ProgramData\NVIDIA
2012-09-16 19:45:25 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-09-11 22:03:27 ----D---- C:\Users\martin\AppData\Roaming\Dropbox
2012-09-10 22:02:44 ----D---- C:\Users\martin\AppData\Roaming\XnView
2012-09-06 22:12:42 ----D---- C:\Users\martin\AppData\Roaming\.purple
2012-09-06 20:39:18 ----D---- C:\Download
2012-09-05 21:43:17 ----SHD---- C:\Windows\Installer
2012-09-05 21:43:11 ----D---- C:\ProgramData\Skype
2012-09-05 21:43:11 ----D---- C:\Program Files\Common Files
2012-08-30 20:32:06 ----D---- C:\Users\martin\AppData\Roaming\Mozilla
2012-08-23 20:14:31 ----D---- C:\Windows\System32
2012-08-23 20:14:30 ----RSD---- C:\Windows\Fonts
2012-08-23 20:14:29 ----D---- C:\Windows\system32\DriverStore
2012-08-23 20:14:26 ----D---- C:\Windows\inf
2012-08-20 22:18:12 ----D---- C:\ProgramData\Microsoft Help
2012-08-20 22:16:42 ----D---- C:\Windows\debug
2012-08-20 22:16:41 ----A---- C:\Windows\system32\MRT.exe
2012-08-20 20:20:30 ----D---- C:\Users\martin\AppData\Roaming\Winamp
2012-08-20 20:12:53 ----D---- C:\Windows\system32\migration
2012-08-20 20:12:53 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2009-02-19 84320]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-05-13 137928]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-09-16 36000]
R1 pctgntdi;pctgntdi; \??\C:\Windows\System32\drivers\pctgntdi.sys [2010-02-05 233136]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-05-13 83392]
R2 Hardlock;Hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2005-07-28 685056]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\Windows\system32\drivers\PCTAppEvent.sys [2009-11-23 88040]
R3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [2009-12-22 18136]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-30 2350624]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x86.sys [2009-08-23 48640]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 116736]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\Windows\system32\drivers\pctNdis-PacketFilter.sys [2010-01-12 70664]
R3 pctNDIS;PC Tools Driver; C:\Windows\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
R3 pctplfw;pctplfw; \??\C:\Windows\System32\drivers\pctplfw.sys [2010-01-13 115216]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-01 691696]
S2 StudioPro;StudioPro webcam; C:\Windows\system32\DRIVERS\StudioPro.sys [2007-01-05 120320]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2004-10-25 21664]
S3 EuMusDesignVirtualAudioCableWdm;StudioPro audio (WDM); C:\Windows\system32\DRIVERS\vrtaucbl.sys [2007-04-22 38784]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys []
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-02-02 47360]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2011-05-10 42496]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 wacmoumonitor;Wacom Mode Helper; C:\Windows\system32\DRIVERS\wacmoumonitor.sys [2008-10-06 15656]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-05-13 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-05-13 86224]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-10-09 55144]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 DCPFLICS;DCPFLICS; C:\Program Files\DCPFLICS\DCPFLICS.exe [2007-10-24 139268]
R2 dgdersvc;Device Error Recovery Service; C:\Windows\system32\dgdersvc.exe [2009-12-22 95568]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-12-22 217088]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-02-23 608872]
R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-27 398176]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-10-23 75064]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-07-14 239648]
R2 TabletServiceWacom;TabletServiceWacom; C:\Windows\system32\Wacom_Tablet.exe [2009-03-26 2789672]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 mi-raysat_3dsmax2011_32;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe [2010-03-10 86016]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2011-01-28 72704]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-07-18 1044816]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-10-09 821608]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-10 114144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-24 1343400]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím.

Vydrž minutku, na logu se intenzivně pracuje.

Na první pohled v logu nic špatného nevidět. Jen zbytky po zdržovadle Conduit Engine. Hoď mi sem log z OTL podle návodu, tam se to lépe maže.


Pro začátek stáhni OTL z tohoto odkazu a ulož jej na Plochu.

• Pokud používáš operační systém Windows Vista či Windows 7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Zaškrtni okénko Pro všechny uživatele.
• Zaškrtni okénko Kontrola na havěť "LOP".
• Zaškrtni okénko Kontrola na havěť "Purity".
• Stáři souborů změň z 30 dnů na 7 dnů!!
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

• Klikni na tlačítko [Prohledat].
• Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.
• Logy se nevejdou do jednoho, rozděl je tedy prosím do více příspěvků.

ahoj, dik a tady jsou logy
------------------------------
OTL logfile created on: 17.9.2012 19:59:25 - Run 1
OTL by OldTimer - Version 3.2.61.5 Folder = C:\Users\martin\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.25 Gb Total Physical Memory | 2.21 Gb Available Physical Memory | 68.16% Memory free
6.50 Gb Paging File | 5.31 Gb Available in Paging File | 81.77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 116.61 Gb Free Space | 50.07% Space Free | Partition Type: NTFS

Computer Name: LULU | User Name: martin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.09.17 19:57:36 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\martin\Desktop\OTL.exe
PRC - [2012.09.10 21:40:27 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012.08.19 11:12:45 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.13 20:13:45 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.13 20:13:44 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.13 20:13:44 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011.02.23 01:39:24 | 000,803,432 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2010.11.27 00:55:42 | 000,398,176 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010.03.10 03:10:38 | 000,086,016 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe
PRC - [2010.01.12 11:41:00 | 003,168,216 | ---- | M] (PC Tools) -- C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
PRC - [2009.12.22 04:31:26 | 000,217,088 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2009.12.22 04:31:02 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) -- C:\Windows\System32\dgdersvc.exe
PRC - [2009.11.09 11:20:14 | 000,818,432 | ---- | M] (PC Tools) -- C:\Program Files\PC Tools Firewall Plus\FWService.exe
PRC - [2009.07.14 12:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2009.05.15 15:26:02 | 005,750,272 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
PRC - [2009.03.26 17:16:24 | 000,186,664 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\WTablet\Wacom_TabletUser.exe
PRC - [2009.03.26 17:15:24 | 002,789,672 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\Wacom_Tablet.exe
PRC - [2007.10.24 16:43:48 | 000,139,268 | ---- | M] () -- C:\Program Files\DCPFLICS\DCPFLICS.exe


========== Modules (No Company Name) ==========

MOD - [2012.09.10 21:40:27 | 002,244,064 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2009.05.15 15:26:02 | 005,750,272 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
MOD - [2009.04.27 12:55:12 | 000,678,400 | ---- | M] () -- C:\Program Files\IZArc\IZArcCM.dll
MOD - [2009.03.25 16:53:14 | 000,053,248 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
MOD - [2009.01.15 14:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\pngio.dll
MOD - [2008.03.30 17:22:42 | 000,070,144 | ---- | M] () -- C:\Program Files\PSPad editor\PSPadShell.dll
MOD - [2006.01.10 10:50:20 | 000,024,576 | R--- | M] () -- C:\Windows\System32\AsIO.dll


========== Services (SafeList) ==========

SRV - [2012.09.10 21:40:27 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.05.13 20:13:45 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.13 20:13:44 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.07.18 19:59:41 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.11.27 00:55:42 | 000,398,176 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)
SRV - [2010.06.24 23:01:24 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010.03.10 03:10:38 | 000,086,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe -- (mi-raysat_3dsmax2011_32)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.12.22 04:31:26 | 000,217,088 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2009.12.22 04:31:02 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Running] -- C:\Windows\System32\dgdersvc.exe -- (dgdersvc)
SRV - [2009.11.09 11:20:14 | 000,818,432 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus)
SRV - [2009.07.20 11:51:52 | 000,935,208 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009.07.14 12:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.03.26 17:15:24 | 002,789,672 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Windows\System32\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV - [2007.10.24 16:43:48 | 000,139,268 | ---- | M] () [Auto | Running] -- C:\Program Files\DCPFLICS\DCPFLICS.exe -- (DCPFLICS)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2012.05.13 20:13:45 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.13 20:13:45 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.09.16 17:09:17 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.02.23 02:57:00 | 010,468,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010.12.01 22:30:02 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.06.17 15:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.02.05 09:17:56 | 000,233,136 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\System32\drivers\pctgntdi.sys -- (pctgntdi)
DRV - [2010.01.13 08:59:28 | 000,115,216 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pctplfw.sys -- (pctplfw)
DRV - [2010.01.12 09:34:14 | 000,070,664 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pctNdis-PacketFilter.sys -- (PCTFW-PacketFilter)
DRV - [2010.01.07 11:35:06 | 000,058,816 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pctNdis.sys -- (pctNDIS)
DRV - [2009.12.22 04:31:26 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.12.22 04:31:02 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2009.11.23 13:54:20 | 000,088,040 | ---- | M] (PC Tools) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\PCTAppEvent.sys -- (PCTAppEvent)
DRV - [2009.08.23 05:06:38 | 000,048,640 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1E62x86.sys -- (L1E)
DRV - [2009.02.24 19:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2009.02.19 16:13:42 | 000,084,320 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\jraid.sys -- (JRAID)
DRV - [2008.10.06 11:53:24 | 000,015,656 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2007.12.17 11:14:06 | 000,012,400 | R--- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2007.04.22 19:27:48 | 000,038,784 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
DRV - [2007.01.05 21:18:00 | 000,120,320 | ---- | M] (e2eSoft) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\StudioPro.sys -- (StudioPro)
DRV - [2006.10.18 07:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2005.07.28 08:18:40 | 000,685,056 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (Hardlock)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\..\SearchScopes,DefaultScope = {48F843C9-E636-4A59-B243-66410B05D9E4}
IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\..\SearchScopes\{48F843C9-E636-4A59-B243-66410B05D9E4}: "URL" = http://www.google.cz/search?q={searchTe ... {startPage}
IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms}
IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421;<local>

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "YouTube"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.cz/ig?tab=mw&hl=cs&source=iglk"
FF - prefs.js..extensions.enabledAddons: foxmarks@kei.com:3.9.5
FF - prefs.js..extensions.enabledAddons: testpilot@labs.mozilla.com:1.0.4
FF - prefs.js..extensions.enabledItems: foxmarks@kei.com:3.9.5
FF - prefs.js..extensions.enabledItems: {4548ECB8-DA60-439A-A00D-5C893F8E1F9A}:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: testpilot@labs.mozilla.com:1.0.4
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\martin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\martin\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\martin\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\martin\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.09.10 21:40:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.09.10 21:40:25 | 000,000,000 | ---D | M]

[2011.02.18 19:00:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\martin\AppData\Roaming\Mozilla\Extensions
[2011.01.15 22:58:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\martin\AppData\Roaming\Mozilla\Extensions\MediaCoder
[2011.01.15 23:03:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\martin\AppData\Roaming\Mozilla\Extensions\MediaCoder-Setup-Wizard
[2011.07.31 19:10:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Profiles\8zvwkm5y.default\extensions
[2011.02.18 19:00:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Profiles\8zvwkm5y.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.07.31 19:10:33 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Profiles\8zvwkm5y.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.02.18 18:59:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Profiles\8zvwkm5y.default\extensions\foxmarks@kei.com
[2012.05.02 18:57:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Profiles\tiatrvo9.default\extensions
[2012.09.10 21:40:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.09.10 21:40:24 | 000,000,000 | ---D | M] (Seekapp) -- C:\Program Files\Mozilla Firefox\extensions\{4548ECB8-DA60-439A-A00D-5C893F8E1F9A}
[2012.09.10 21:40:27 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.05.14 19:48:31 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.05.14 19:48:31 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2010.03.31 09:52:45 | 000,002,382 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seekapp179.xml
[2012.05.14 19:48:31 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.05.14 19:48:31 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.05.14 19:48:31 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009.08.22 13:28:45 | 000,001,219 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKU\S-1-5-21-512755631-3653737577-437137093-1000\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKLM..\Run: [00PCTFW] C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKU\S-1-5-21-512755631-3653737577-437137093-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-512755631-3653737577-437137093-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\martin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.3.0)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F049DEB3-049D-4454-A78A-4852E43DAEE3}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22 - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences\FencesMenu.dll (Stardock)
O24 - Desktop WallPaper: C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
O24 - Desktop BackupWallPaper: C:\Users\martin\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{f45c1406-ebb0-11de-b023-0026185b5526}\Shell - "" = AutoRun
O33 - MountPoints2\{f45c1406-ebb0-11de-b023-0026185b5526}\Shell\AutoRun\command - "" = E:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32: msacm.l3acm - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.x264 - C:\Program Files\x264vfw\x264vfw.dll ()
Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.09.17 19:57:32 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\martin\Desktop\OTL.exe
[2012.09.16 20:05:25 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2012.09.16 20:05:22 | 000,240,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2012.09.16 20:05:22 | 000,187,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2012.09.16 20:05:20 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2012.09.16 20:02:45 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.09.16 20:02:45 | 000,000,000 | ---D | C] -- C:\rsit
[2012.09.10 21:40:23 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010.02.02 18:08:52 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\martin\AppData\Roaming\pcouffin.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.09.17 20:01:19 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.09.17 19:58:23 | 000,669,486 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2012.09.17 19:58:23 | 000,654,880 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.09.17 19:58:23 | 000,141,118 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2012.09.17 19:58:23 | 000,121,752 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.09.17 19:57:36 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\martin\Desktop\OTL.exe
[2012.09.17 19:55:53 | 000,011,120 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.17 19:55:53 | 000,011,120 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.17 19:48:23 | 008,405,015 | ---- | M] () -- C:\Windows\TempFile
[2012.09.17 19:48:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.17 19:48:08 | 2616,549,376 | -HS- | M] () -- C:\hiberfil.sys
[2012.09.16 20:07:45 | 000,781,383 | ---- | M] () -- C:\Users\martin\Desktop\RSIT.exe
[2012.09.11 21:39:00 | 000,000,962 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1001UA.job
[2012.09.11 21:32:00 | 000,000,966 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1000UA.job
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.09.17 20:01:19 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.09.16 20:07:45 | 000,781,383 | ---- | C] () -- C:\Users\martin\Desktop\RSIT.exe
[2012.04.02 20:20:59 | 000,000,132 | ---- | C] () -- C:\Users\martin\AppData\Roaming\Adobe GIF Format CS5 Prefs
[2012.02.27 23:18:06 | 000,645,632 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2012.02.27 23:18:06 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2012.01.04 08:08:50 | 000,000,132 | ---- | C] () -- C:\Users\martin\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2011.12.28 13:12:07 | 000,151,552 | ---- | C] () -- C:\Windows\System32\nvRegDev.dll
[2011.06.29 18:46:49 | 000,000,107 | ---- | C] () -- C:\Windows\VobEdit.INI
[2011.06.22 20:50:11 | 000,057,344 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011.04.23 12:55:07 | 000,000,041 | ---- | C] () -- C:\Windows\dice.ini
[2011.02.26 20:22:46 | 000,002,516 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2011.02.26 20:22:46 | 000,000,088 | RHS- | C] () -- C:\ProgramData\601F66C6FA.sys
[2011.01.28 22:03:51 | 000,004,608 | ---- | C] () -- C:\Users\martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.12.30 11:09:51 | 000,007,607 | ---- | C] () -- C:\Users\martin\AppData\Local\Resmon.ResmonCfg
[2010.12.28 15:02:30 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2010.12.28 15:02:30 | 000,036,640 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010.11.15 23:52:20 | 000,000,132 | ---- | C] () -- C:\Users\martin\AppData\Roaming\Adobe Targa Format CS5 Prefs
[2010.11.03 22:10:15 | 000,005,824 | ---- | C] () -- C:\Users\martin\UserCustomPreset_After Effects.vpr
[2010.10.23 22:43:07 | 000,000,132 | ---- | C] () -- C:\Users\martin\AppData\Roaming\Adobe IllExport Filter CS5 Prefs
[2010.09.25 18:07:25 | 000,000,031 | ---- | C] () -- C:\Windows\e2eSoft.ini
[2010.08.13 20:50:34 | 000,000,132 | ---- | C] () -- C:\Users\martin\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010.08.11 21:37:39 | 000,001,456 | ---- | C] () -- C:\Users\martin\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010.03.15 18:03:25 | 000,000,218 | ---- | C] () -- C:\Users\martin\.recently-used.xbel
[2010.03.11 20:16:01 | 000,000,030 | ---- | C] () -- C:\Users\martin\.gtkrc-2.0
[2010.02.02 18:08:52 | 000,087,608 | ---- | C] () -- C:\Users\martin\AppData\Roaming\inst.exe
[2010.02.02 18:08:52 | 000,007,887 | ---- | C] () -- C:\Users\martin\AppData\Roaming\pcouffin.cat
[2010.02.02 18:08:52 | 000,001,144 | ---- | C] () -- C:\Users\martin\AppData\Roaming\pcouffin.inf
[2009.08.19 22:03:30 | 000,138,056 | ---- | C] () -- C:\Users\martin\AppData\Roaming\PnkBstrK.sys

========== LOP Check ==========

[2012.09.17 20:03:20 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\.purple
[2011.11.04 11:31:50 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Autodesk
[2011.01.15 23:13:39 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Broad Intelligence
[2010.08.09 22:45:22 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009.11.08 16:07:00 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\CINEMAX
[2011.06.19 10:30:06 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\com.adobe.dmp.contentviewer
[2011.06.19 09:58:21 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.09.11 22:03:27 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Dropbox
[2011.07.31 19:10:39 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\DVDVideoSoft
[2011.07.31 19:10:33 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.09.24 09:08:08 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\GarageGames
[2011.06.25 10:17:58 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\GetRightToGo
[2011.01.16 19:33:18 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\GHISLER
[2011.10.31 21:08:53 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\gtk-2.0
[2009.11.08 16:07:01 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Independent
[2011.12.02 18:11:17 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Klok2.DD7F2188B985C2439837C76B42A187050457E61B.1
[2011.04.15 19:44:59 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\MindomoDesktop
[2009.11.08 16:07:09 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Miranda
[2009.11.08 16:07:12 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\OpenOffice.org
[2011.01.10 22:31:24 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Opera
[2011.12.12 09:52:33 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PACE Anti-Piracy
[2011.01.16 14:51:51 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PC Suite
[2010.07.29 19:53:28 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PCToolsFirewallPlus
[2012.07.01 20:16:38 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PDAppFlex
[2011.01.16 15:01:49 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Samsung
[2011.04.15 20:11:20 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\SmartDraw
[2010.08.09 22:32:39 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010.03.06 19:34:45 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Stardock
[2012.05.29 22:31:09 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Systweak
[2011.12.12 09:52:44 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Unity
[2010.11.02 23:13:09 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Video Converter for Any Flv Player
[2012.04.07 22:04:51 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Vso
[2012.09.10 22:02:44 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\XnView
[2009.11.08 16:07:14 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Xsens
[2011.02.15 12:33:02 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Yammer
[2012.03.14 21:03:36 | 000,032,564 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< netsvc >

< MD5 for: ATAPI.SYS >
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009.07.14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011.06.21 07:34:23 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=04E4A7D53A7ACE02E8C55B17A498F631 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_b513df73c4b4f466\tcpip.sys
[2011.09.29 18:02:44 | 001,301,872 | ---- | M] (Microsoft Corporation) MD5=22F7E7CBCA308DEE3428B097D4F8A61C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_b38e8546e0cbe4a1\tcpip.sys
[2012.08.22 19:05:21 | 001,306,992 | ---- | M] (Microsoft Corporation) MD5=23790A44D9A6B67F8690C34D4F516446 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_b55b785ade04500f\tcpip.sys
[2011.04.25 06:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009.07.14 03:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2010.11.20 14:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011.09.29 18:17:18 | 001,303,920 | ---- | M] (Microsoft Corporation) MD5=3C1C41E317710F74CEC1E7F0D5325993 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_b5a84e10ddca7566\tcpip.sys
[2012.03.30 12:29:05 | 001,287,024 | ---- | M] (Microsoft Corporation) MD5=55E9965552741F3850CB22CBBA9671ED -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_b2f57423c7b8dea8\tcpip.sys
[2011.09.29 17:43:37 | 001,285,488 | ---- | M] (Microsoft Corporation) MD5=56C198AC82EFA622DD93E9E43575F79C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_b2f8731bc7b62d86\tcpip.sys
[2011.09.29 18:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_b4d1ffa1c4e682b5\tcpip.sys
[2011.04.25 08:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2012.03.30 12:23:11 | 001,291,632 | ---- | M] (Microsoft Corporation) MD5=7FA2E0F8B072BD04B77B421480B6CC22 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_b52e5147c4a202d7\tcpip.sys
[2011.04.25 06:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2012.03.30 11:04:23 | 001,306,480 | ---- | M] (Microsoft Corporation) MD5=88FCDB9923EFECA207B3CEBD24407126 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_b583df0adde66104\tcpip.sys
[2011.06.21 07:30:45 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=93C444D118B184452132357C322124CD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_b3703df4e0e237e0\tcpip.sys
[2010.06.14 08:06:58 | 001,288,576 | ---- | M] (Microsoft Corporation) MD5=A39EA325C081AD27461F630C8E3E56E0 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
[2012.08.22 19:16:54 | 001,292,144 | ---- | M] (Microsoft Corporation) MD5=A5EBB8F648000E88B7D9390B514976BF -- C:\Windows\System32\drivers\tcpip.sys
[2012.08.22 19:16:54 | 001,292,144 | ---- | M] (Microsoft Corporation) MD5=A5EBB8F648000E88B7D9390B514976BF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_b514e56fc4b40532\tcpip.sys
[2010.06.14 08:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
[2011.06.21 07:39:53 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=C2DAAEB48F3A47C410B041A0D2382EE1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_b32e82b7c78da1d1\tcpip.sys
[2011.06.21 08:54:00 | 001,303,424 | ---- | M] (Microsoft Corporation) MD5=DEC4940487050AE13C60C86F40E07E75 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_b583db3edde666b6\tcpip.sys
[2012.03.30 12:08:19 | 001,303,408 | ---- | M] (Microsoft Corporation) MD5=E47C2844A1605A44178F4281E4D58B3D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_b38bb990e0ccc871\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[15 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[5 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\924659fb2bc84764c1a94b262ba4b193\*.tmp files -> C:\Windows\SoftwareDistribution\Download\924659fb2bc84764c1a94b262ba4b193\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\b67467d1719cf8aedf56ad6c161b5b3b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\b67467d1719cf8aedf56ad6c161b5b3b\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2008.04.11 08:03:48 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.09.17 20:12:12 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\.purple
[2012.07.10 20:17:46 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Adobe
[2010.08.13 20:40:16 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Adobe Mini Bridge CS5
[2011.05.19 19:42:45 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Apple Computer
[2011.11.04 11:31:50 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Autodesk
[2012.03.14 21:10:51 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Avira
[2011.01.15 23:13:39 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Broad Intelligence
[2010.08.09 22:45:22 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009.11.08 16:07:00 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\CINEMAX
[2011.06.19 10:30:06 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\com.adobe.dmp.contentviewer
[2011.06.19 09:58:21 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011.02.26 20:22:48 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Corel
[2012.09.11 22:03:27 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Dropbox
[2012.08.03 20:52:10 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\dvdcss
[2011.07.31 19:10:39 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\DVDVideoSoft
[2011.07.31 19:10:33 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.09.24 09:08:08 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\GarageGames
[2011.06.25 10:17:58 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\GetRightToGo
[2011.01.16 19:33:18 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\GHISLER
[2011.10.31 21:08:53 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\gtk-2.0
[2009.11.08 16:07:01 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Identities
[2009.11.08 16:07:01 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Independent
[2011.12.02 18:11:17 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Klok2.DD7F2188B985C2439837C76B42A187050457E61B.1
[2009.11.08 16:07:01 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Macromedia
[2011.04.12 18:53:28 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Malwarebytes
[2009.07.14 11:19:24 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Media Center Programs
[2012.06.14 19:53:48 | 000,000,000 | --SD | M] -- C:\Users\martin\AppData\Roaming\Microsoft
[2011.04.15 19:44:59 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\MindomoDesktop
[2009.11.08 16:07:09 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Miranda
[2012.08.30 20:32:06 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Mozilla
[2009.11.08 16:07:12 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Nero
[2011.06.29 15:00:54 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\NVIDIA
[2009.11.08 16:07:12 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\OpenOffice.org
[2011.01.10 22:31:24 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Opera
[2011.12.12 09:52:33 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PACE Anti-Piracy
[2011.01.16 14:51:51 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PC Suite
[2010.07.29 19:53:28 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PCToolsFirewallPlus
[2012.07.01 20:16:38 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PDAppFlex
[2011.01.25 18:02:26 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\PSpad
[2009.11.09 13:23:18 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Real
[2011.01.16 15:01:49 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Samsung
[2010.03.12 19:05:43 | 000,000,000 | RH-D | M] -- C:\Users\martin\AppData\Roaming\SecuROM
[2012.09.16 19:51:46 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Skype
[2010.10.02 21:16:53 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\skypePM
[2011.04.15 20:11:20 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\SmartDraw
[2011.09.15 21:46:59 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Sony Corporation
[2010.08.09 22:32:39 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010.03.06 19:34:45 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Stardock
[2012.04.01 09:12:54 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\SUPERAntiSpyware.com
[2012.05.29 22:31:09 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Systweak
[2011.12.12 09:52:44 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Unity
[2010.11.02 23:13:09 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Video Converter for Any Flv Player
[2011.11.04 20:15:51 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\vlc
[2012.04.07 22:04:51 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Vso
[2012.08.20 20:20:30 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Winamp
[2009.12.05 22:36:58 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\WinRAR
[2012.09.17 19:49:04 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\WTablet
[2012.09.10 22:02:44 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\XnView
[2009.11.08 16:07:14 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Xsens
[2011.02.15 12:33:02 | 000,000,000 | ---D | M] -- C:\Users\martin\AppData\Roaming\Yammer

< %APPDATA%\*.exe /s >
[2010.02.27 18:27:34 | 000,087,608 | ---- | M] () -- C:\Users\martin\AppData\Roaming\inst.exe
[2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\martin\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2012.05.24 20:39:24 | 000,872,144 | ---- | M] (Dropbox, Inc.) -- C:\Users\martin\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2012.05.24 20:39:56 | 000,177,280 | ---- | M] (Dropbox, Inc.) -- C:\Users\martin\AppData\Roaming\Dropbox\bin\Uninstall.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2012.07.14 09:32:01 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1000Core.job
[2012.09.11 21:32:00 | 000,000,966 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1000UA.job
[2012.07.14 11:39:00 | 000,000,910 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1001Core.job
[2012.09.11 21:39:00 | 000,000,962 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-512755631-3653737577-437137093-1001UA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.09.17 19:55:53 | 000,011,120 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.17 19:55:53 | 000,011,120 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.16 20:16:02 | 062,164,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\MRT.exe
[2012.09.17 19:58:23 | 000,141,118 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2012.09.17 19:58:23 | 000,121,752 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2012.09.17 19:58:23 | 000,669,486 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2012.09.17 19:58:23 | 000,654,880 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2012.09.17 19:58:23 | 001,585,238 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI

< %SYSTEMDRIVE%\*.exe >
[2008.04.11 08:03:48 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< %userprofile%\Plocha\*.* >

< %userprofile%\Desktop\*.* >
[2011.11.12 20:45:50 | 000,001,277 | ---- | M] () -- C:\Users\martin\Desktop\Adobe After Effects CS3.lnk
[2011.11.04 17:19:24 | 000,001,608 | ---- | M] () -- C:\Users\martin\Desktop\Adobe Illustrator CS5.lnk
[2010.08.13 20:26:46 | 000,001,165 | ---- | M] () -- C:\Users\martin\Desktop\Adobe Photoshop CS5.lnk
[2011.12.30 09:45:20 | 000,001,340 | ---- | M] () -- C:\Users\martin\Desktop\Alchemy.lnk
[2010.02.18 19:00:25 | 000,001,931 | ---- | M] () -- C:\Users\martin\Desktop\Bryce 5.5.lnk
[2011.04.20 21:53:48 | 000,000,010 | ---- | M] () -- C:\Users\martin\Desktop\d-link.txt
[2012.07.11 13:35:48 | 000,000,472 | -HS- | M] () -- C:\Users\martin\Desktop\desktop.ini
[2012.05.29 22:50:26 | 000,001,233 | ---- | M] () -- C:\Users\martin\Desktop\DiskInternals Flash Recovery.lnk
[2012.06.05 20:49:58 | 000,001,016 | ---- | M] () -- C:\Users\martin\Desktop\Dropbox.lnk
[2011.01.15 23:18:36 | 000,001,156 | ---- | M] () -- C:\Users\martin\Desktop\Format Factory.lnk
[2010.11.01 22:45:58 | 000,000,921 | ---- | M] () -- C:\Users\martin\Desktop\Fraps.lnk
[2011.06.19 10:30:28 | 000,001,169 | ---- | M] () -- C:\Users\martin\Desktop\InDesign CS5.5.lnk
[2009.08.18 13:45:18 | 000,001,614 | ---- | M] () -- C:\Users\martin\Desktop\IZArc.lnk
[2009.12.18 11:24:34 | 000,000,923 | ---- | M] () -- C:\Users\martin\Desktop\MagicDisc.lnk
[2009.10.01 13:54:04 | 000,001,122 | ---- | M] () -- C:\Users\martin\Desktop\MVN Studio.lnk
[2012.09.17 19:57:36 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\martin\Desktop\OTL.exe
[2011.01.25 18:01:19 | 000,000,914 | ---- | M] () -- C:\Users\martin\Desktop\PSPad.lnk
[2010.11.02 22:30:34 | 000,001,104 | ---- | M] () -- C:\Users\martin\Desktop\Riva FLV Encoder.lnk
[2010.11.02 22:30:35 | 000,001,099 | ---- | M] () -- C:\Users\martin\Desktop\Riva FLV Player.lnk
[2012.09.16 20:07:45 | 000,781,383 | ---- | M] () -- C:\Users\martin\Desktop\RSIT.exe
[2009.08.18 11:43:27 | 000,000,830 | ---- | M] () -- C:\Users\martin\Desktop\Total Commander.lnk
[2011.11.12 22:58:45 | 000,001,042 | ---- | M] () -- C:\Users\martin\Desktop\VLC media player.lnk
[2009.08.18 13:52:17 | 000,001,663 | ---- | M] () -- C:\Users\martin\Desktop\Wacom.lnk
[2011.08.06 20:46:58 | 000,002,741 | ---- | M] () -- C:\Users\martin\Desktop\Word 2007.lnk
[2012.06.27 19:36:11 | 000,001,747 | ---- | M] () -- C:\Users\martin\Desktop\XnView.lnk

< %ALLUSERSPROFILE%\Plocha\*.* >

< %ALLUSERSPROFILE%\Desktop\*.* >

< *crack* /s >
[2007.04.04 14:29:30 | 001,159,409 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\Presets\Image - Special Effects\Cracked Tiles.ffx
[2001.08.14 14:31:08 | 000,030,054 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2011\Inventor Server\Textures\surfaces\Cracks.bmp
[2010.09.06 01:45:08 | 000,006,551 | ---- | M] () -- \Program Files\Autodesk\Maya2011\brushes\fun\cracks.mel
[2010.09.06 01:45:08 | 000,006,093 | ---- | M] () -- \Program Files\Autodesk\Maya2011\brushes\fun\cracks.mel.icon
[2010.09.06 01:44:24 | 000,007,002 | ---- | M] () -- \Program Files\Autodesk\Maya2011\brushImages\hexcrack.jpg
[2010.12.29 20:45:42 | 000,010,592 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\files\UV_texture_mapping_Creating_a_cracker_box_model.htm
[2010.12.29 20:45:57 | 000,015,523 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\images\MED\Sherlock\Dynamics\ShatterCrack.png
[2010.12.29 20:46:01 | 000,029,865 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\images\MED\Sherlock\GS\comp_crackerbox_begin.png
[2010.12.29 20:46:04 | 000,013,556 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\images\MED\Sherlock\GS\crackerbox_default.png
[2010.09.06 01:44:40 | 001,304,706 | ---- | M] () -- \Program Files\Autodesk\Maya2011\presets\nParticles\examples\CrackEgg.ma
[2010.09.06 01:44:40 | 000,001,303 | ---- | M] () -- \Program Files\Autodesk\Maya2011\presets\nParticles\examples\.mayaSwatches\CrackEgg.ma.swatch
[2010.09.06 01:32:40 | 000,002,651 | ---- | M] () -- \Program Files\Autodesk\Maya2011\resources\l10n\ja_JP\scripts\crackShatter.res.mel
[2010.09.06 01:37:50 | 000,069,068 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\crackShatter.mel
[2010.09.06 01:37:50 | 000,002,558 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\crackShatter.res.mel

< *keygen* /s >

< *loader* /s >
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\de_de\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\en_us\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\es_es\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\it_it\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\no_no\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,308 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2008.08.28 16:42:16 | 000,000,011 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2009.09.17 20:12:18 | 000,000,171 | ---- | M] () -- \$WINDOWS.~Q\DATA\Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2007.03.14 20:21:36 | 004,937,904 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\Photodownloader.exe
[2007.03.14 18:07:28 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\de_de\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\en_us\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\es_es\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\it_it\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\no_no\Photodownloader.ini
[2007.03.14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2007.03.14 18:07:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2007.03.14 18:07:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2007.03.14 18:07:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2011.03.02 21:35:42 | 005,299,048 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\Photodownloader.exe
[2011.03.02 18:57:10 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\de_de\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\en_us\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\es_es\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\it_it\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\no_no\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2011.03.02 18:57:14 | 000,000,308 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2011.03.02 18:57:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2011.06.09 23:52:42 | 005,299,048 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\Photodownloader.exe
[2010.03.09 01:38:58 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2010.03.09 01:38:58 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\de_de\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\en_us\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\es_es\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\it_it\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\no_no\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,308 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2012.03.13 12:18:28 | 003,297,128 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\Photodownloader.exe
[2012.03.13 10:41:34 | 000,000,860 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\Photodownloader.exe.manifest
[2012.03.13 10:41:58 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2012.03.13 10:42:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\de_de\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\en_us\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\es_es\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\it_it\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\no_no\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2012.03.13 10:42:06 | 000,000,324 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2012.03.13 10:42:06 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2011.03.10 22:49:30 | 000,003,754 | ---- | M] () -- \Program Files\Adobe\Adobe InDesign CS5.5\Scripts\converturltohyperlink\startup scripts\ConvertURLToHyperlinkMenuItemLoader.jsx
[2012.03.28 18:52:50 | 000,008,962 | ---- | M] () -- \Program Files\Adobe\Adobe InDesign CS6\Presets\multimedia\HTMLLoader\HTMLLoader-app.xml
[2012.03.28 18:52:50 | 000,268,719 | ---- | M] () -- \Program Files\Adobe\Adobe InDesign CS6\Presets\multimedia\HTMLLoader\HTMLLoader.swf
[2012.03.28 18:52:04 | 000,003,754 | ---- | M] () -- \Program Files\Adobe\Adobe InDesign CS6\Scripts\converturltohyperlink\startup scripts\ConvertURLToHyperlinkMenuItemLoader.jsx
[2011.03.15 14:03:04 | 000,076,800 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS5.5\MXF_SDK_MetaMetadata_BinaryLoader_4.3.4.dll
[2011.03.15 14:03:04 | 000,142,848 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS5.5\MXF_SDK_MetaMetadata_XSDLoader2_4.3.4.dll
[2011.03.15 14:03:04 | 000,109,568 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS5.5\MXF_SDK_MetaMetadata_XSDLoader_4.3.4.dll
[2012.03.16 03:49:26 | 000,078,336 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS6\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll
[2012.03.16 03:49:26 | 000,155,136 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS6\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll
[2012.03.16 03:49:26 | 000,117,248 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS6\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll
[2010.01.20 23:29:02 | 000,026,472 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2011\AecLoader.arx
[2010.03.10 03:11:08 | 000,009,728 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2011\AssemblyLoader.dll
[2010.03.10 03:11:08 | 000,008,693 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2011\AssemblyLoader.xml
[2010.03.10 05:36:42 | 000,023,040 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2011\stdplugs\ParserLoader.gup
[2010.03.10 05:56:04 | 000,046,592 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2011\stdplugs\SceneEffectLoader.dlu
[2009.04.23 10:28:06 | 000,262,244 | ---- | M] () -- \Program Files\Autodesk\Autodesk MotionBuilder 2011 32-bit\bin\system\splash\loader_icon.tif
[2010.02.25 21:40:16 | 000,150,656 | ---- | M] () -- \Program Files\Autodesk\Autodesk MotionBuilder 2011 32-bit\bin\system\splash\loader_icon_animation.tif
[2009.12.08 21:00:04 | 000,071,008 | ---- | M] () -- \Program Files\Autodesk\Autodesk MotionBuilder 2011 32-bit\bin\win32\PhysXLoader.dll
[2010.03.15 07:44:18 | 000,009,728 | ---- | M] () -- \Program Files\Autodesk\Autodesk MotionBuilder 2011 32-bit\bin\win32\plugins\fbalienbrain_loader.dll
[2010.09.06 05:42:16 | 000,566,784 | ---- | M] () -- \Program Files\Autodesk\Maya2011\bin\plug-ins\OpenEXRLoader.mll
[2006.05.11 15:51:48 | 000,002,605 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\ExternalWebBrowser\Windows\src\PlugIn\gecko-sdk\idl\mozIJSSubScriptLoader.idl
[2006.05.11 15:52:44 | 000,002,832 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\ExternalWebBrowser\Windows\src\PlugIn\gecko-sdk\include\mozIJSSubScriptLoader.h
[2010.09.06 01:35:06 | 000,001,623 | ---- | M] () -- \Program Files\Autodesk\Maya2011\resources\l10n\ja_JP\plug-ins\OpenEXRLoader.pres.mel
[2012.05.13 20:13:44 | 000,047,568 | ---- | M] () -- \Program Files\Avira\AntiVir Desktop\avwebloader.dll
[2012.05.13 20:13:44 | 000,232,912 | ---- | M] () -- \Program Files\Avira\AntiVir Desktop\avwebloader.exe
[2012.05.13 20:13:44 | 001,715,152 | ---- | M] () -- \Program Files\Avira\AntiVir Desktop\avwebloadergui.dll
[2007.03.14 18:10:18 | 000,088,333 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ar_AE\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:20 | 000,025,188 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\cs_CZ\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:26 | 000,032,022 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\da_DK\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:28 | 000,032,216 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\de_DE\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:30 | 000,027,655 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\el_GR\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:36 | 000,030,891 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\en_US\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:38 | 000,032,399 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\es_ES\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:42 | 000,032,333 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\fi_FI\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:42 | 000,032,393 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\fr_FR\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:46 | 000,022,871 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\he_IL\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:48 | 000,025,272 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\hu_HU\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:50 | 000,032,109 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\it_IT\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:50 | 000,032,441 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ja_JP\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:52 | 000,032,499 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ko_KR\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:54 | 000,032,074 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\nb_NO\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:56 | 000,032,110 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\nl_NL\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:10:58 | 000,024,996 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\pl_PL\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:00 | 000,031,772 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\pt_BR\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:02 | 000,024,463 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ro_RO\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:04 | 000,025,054 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ru_RU\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:06 | 000,032,171 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\sv_SE\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:06 | 000,024,411 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\tr_TR\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:08 | 000,025,525 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\uk_UA\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:10 | 000,032,741 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\zh_CN\Bridge\2.0\images\br_photo_downloader.png
[2007.03.14 18:11:10 | 000,032,833 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\zh_TW\Bridge\2.0\images\br_photo_downloader.png
[2007.03.08 17:35:32 | 000,004,239 | ---- | M] () -- \Program Files\Common Files\Adobe\Startup Scripts CS3\Adobe Version Cue\VersionCueSDKLoader.jsx
[2011.11.11 19:25:36 | 000,059,240 | ---- | M] () -- \Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
[2011.11.11 19:25:36 | 000,718,696 | ---- | M] () -- \Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader_main.dll
[2009.01.12 21:51:16 | 000,023,757 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\bin\gdk-pixbuf-query-loaders.exe
[2009.01.12 21:51:32 | 000,003,657 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\etc\gtk-2.0\gdk-pixbuf.loaders
[2009.01.12 21:51:38 | 000,028,560 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2009.01.12 21:51:38 | 000,027,492 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2009.01.12 21:51:38 | 000,041,827 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2009.01.12 21:51:38 | 000,020,750 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2009.01.12 21:51:38 | 000,027,004 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2009.01.12 21:51:38 | 000,033,364 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2009.01.12 21:51:38 | 000,021,329 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2009.01.12 21:51:38 | 000,035,326 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2009.01.12 21:51:38 | 000,023,528 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2009.01.12 21:51:38 | 000,018,354 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2009.01.12 21:51:38 | 000,023,858 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2009.01.12 21:51:38 | 000,028,334 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2009.01.12 21:51:38 | 000,017,895 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2009.01.12 21:51:38 | 000,023,851 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2009.01.12 21:51:38 | 000,041,060 | ---- | M] () -- \Program Files\Common Files\GTK\2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2010.09.14 09:16:16 | 000,166,912 | ---- | M] () -- \Program Files\Fotostar\Fotostar Offline client4\CWImageLoader0.dll
[2012.01.12 20:39:57 | 000,063,488 | ---- | M] () -- \Program Files\Chaos Group\V-Ray\RT for 3ds Max 2011 for x86\bin\plugins\vray_GeomMeshLoader.dll
[2012.01.12 20:39:57 | 000,070,144 | ---- | M] () -- \Program Files\Chaos Group\V-Ray\RT for 3ds Max 2011 for x86\bin\plugins\vray_GeomMeshLoader1.dll
[2010.11.30 21:42:36 | 000,025,294 | ---- | M] () -- \Program Files\Pidgin\Gtk\bin\gdk-pixbuf-query-loaders.exe
[2010.11.30 21:42:36 | 000,000,543 | ---- | M] () -- \Program Files\Pidgin\Gtk\etc\gtk-2.0\gdk-pixbuf.loaders
[2009.11.09 13:22:43 | 000,001,399 | ---- | M] () -- \Program Files\Real\RealPlayer\browserrecord\firefox\ext\chrome\content\browserrecordloader.js
[2009.11.09 13:22:43 | 000,000,319 | ---- | M] () -- \Program Files\Real\RealPlayer\browserrecord\firefox\ext\chrome\content\browserrecordloader.xul
[2010.11.27 00:51:22 | 000,199,680 | ---- | M] () -- \Program Files\Sony\PMB\PMBServiceUploader.exe
[2010.11.27 01:00:18 | 000,000,012 | ---- | M] () -- \Program Files\Sony\PMB\PMBServiceUploader.ver
[2010.11.27 00:51:16 | 002,546,688 | ---- | M] () -- \Program Files\Sony\PMB\ServiceUploader.dll
[2010.09.24 19:53:44 | 000,016,224 | ---- | M] () -- \Program Files\Sony\PMB\ServiceUploaderStrings.xml
[2009.09.02 12:23:12 | 000,000,523 | ---- | M] () -- \Program Files\Sony\PMB\PMBLauncher\LauncherData\ItemXML\NetworkService_ServiceUploader.xml
[2009.07.20 11:52:26 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012.06.18 12:39:40 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012.06.18 12:39:40 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2009.07.20 11:52:26 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012.06.18 12:39:40 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012.06.18 12:39:40 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2010.03.27 04:58:46 | 000,000,544 | ---- | M] () -- \Users\martin\AppData\Local\Adobe\Flash CS5\cs_CZ\Configuration\Classes\FP7\MovieClipLoader.as
[2010.03.27 04:58:46 | 000,000,544 | ---- | M] () -- \Users\martin\AppData\Local\Adobe\Flash CS5\cs_CZ\Configuration\Classes\FP8\MovieClipLoader.as
[2010.03.27 04:58:46 | 000,000,576 | ---- | M] () -- \Users\martin\AppData\Local\Adobe\Flash CS5\cs_CZ\Configuration\Classes\FP9\MovieClipLoader.as
[2010.03.27 04:58:46 | 000,010,454 | ---- | M] () -- \Users\martin\AppData\Local\Adobe\Flash CS5\cs_CZ\Configuration\Classes\mx\controls\Loader.as
[2012.07.29 13:23:14 | 000,010,519 | ---- | M] () -- \Users\martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1SGGXOKW\AdLoader-aee74f28845638b42a47bb02dc06a7c6.min[1].js
[2012.07.29 13:23:13 | 000,000,652 | ---- | M] () -- \Users\martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5F4KEAUV\AdLoader[1].htm
[2012.09.16 20:00:11 | 000,004,262 | ---- | M] () -- \Users\martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TJ8828IQ\uploaderapi2[1].swf
[2010.08.09 23:02:26 | 000,094,081 | ---- | M] () -- \Users\Public\Documents\Adobe\Help\cs_CZ\CreativeSuite\CS5\Using\images\br_photo_downloader.png
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.04.28 09:55:06 | 000,070,936 | ---- | M] () -- \Windows\System32\PhysXLoader.dll
[2009.07.14 06:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2009.07.14 10:43:57 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 10:43:57 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2009.07.14 10:43:57 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2011.06.29 07:39:11 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2011.06.29 07:39:11 | 000,508,904 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winload.exe_75835076
[2011.06.29 07:39:11 | 000,442,720 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winresume.exe_85cd1215
[2009.07.14 04:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 04:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009.07.14 10:42:11 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 03:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009.08.19 09:38:48 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed.manifest
[2009.08.19 09:21:21 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20509_none_5be12f8ee6d3987e.manifest
[2010.11.20 05:02:40 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2009.07.14 03:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 08:22:35 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16816_none_0ad4ff55dce9d030\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.02 07:45:50 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16823_none_0ac72e8bdcf4a01c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:19:58 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:50:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_0b1fbd2cf6364a4e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 08:13:36 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_0cbc5ca5da0f5573\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:47:28 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17625_none_0caf8c25da193eb6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 09:15:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_0d3c29cef3342a85\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 08:56:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21738_none_0d3159e2f33c4676\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

< *RemoveWAT* /s >

< *minodlogin* /s >

< *tnod* /s >
[2007.01.04 19:24:50 | 000,020,184 | ---- | M] () -- \Program Files\Autodesk\Composite 2011\resources\icons\ImportNode.tif
[2008.07.08 17:12:00 | 000,029,280 | ---- | M] () -- \Program Files\Autodesk\Composite 2011\resources\icons\OutputNode.tif
[2008.07.08 17:12:00 | 000,052,280 | ---- | M] () -- \Program Files\Autodesk\Composite 2011\resources\icons\OutputNodeMedia.tif
[2007.01.04 19:24:52 | 000,020,812 | ---- | M] () -- \Program Files\Autodesk\Composite 2011\resources\icons\SplitNode.tif
[2010.09.06 01:45:56 | 000,000,520 | ---- | M] () -- \Program Files\Autodesk\MatchMover2011\images\TreeCameraConstraintNodal.png
[2010.09.06 01:45:56 | 000,000,801 | ---- | M] () -- \Program Files\Autodesk\MatchMover2011\images\TreeCameraConstraintNodalOff.png
[2010.09.06 01:28:44 | 000,000,982 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\AEcontrastNodeTemplate.mel
[2010.09.06 01:28:50 | 000,000,923 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\AEshiftNodeTemplate.mel
[2010.09.06 01:30:40 | 000,006,538 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\footPrintNode.cpp
[2010.09.06 01:28:56 | 000,001,110 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\footPrintNode.sln
[2010.09.06 01:28:56 | 000,008,977 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\footPrintNode.vcproj
[2010.09.06 01:30:26 | 000,007,357 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\fullLoftNode.cpp
[2010.09.06 01:28:46 | 000,002,836 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\fullLoftNode.mel
[2010.09.06 01:28:56 | 000,001,108 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\fullLoftNode.sln
[2010.09.06 01:28:56 | 000,009,001 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\fullLoftNode.vcproj
[2010.09.06 01:30:46 | 000,005,905 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\offsetNode.cpp
[2010.09.06 01:29:00 | 000,001,104 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\offsetNode.sln
[2010.09.06 01:29:00 | 000,008,893 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\offsetNode.vcproj
[2010.09.06 01:28:44 | 000,001,334 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\render_contrastNode.png
[2010.09.06 01:28:50 | 000,002,794 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\render_shiftNode.png
[2010.09.06 01:30:26 | 000,007,671 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\shiftNode.cpp
[2010.09.06 01:29:02 | 000,001,102 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\shiftNode.sln
[2010.09.06 01:29:02 | 000,008,957 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\shiftNode.vcproj
[2010.09.06 01:30:26 | 000,006,198 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\simpleLoftNode.cpp
[2010.09.06 01:28:50 | 000,000,792 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\simpleLoftNode.mel
[2010.09.06 01:29:02 | 000,001,112 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\simpleLoftNode.sln
[2010.09.06 01:29:02 | 000,009,037 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\simpleLoftNode.vcproj
[2010.09.06 01:30:18 | 000,008,251 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\stringFormatNode.cpp
[2010.09.06 01:29:04 | 000,001,116 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\stringFormatNode.sln
[2010.09.06 01:29:04 | 000,009,147 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\stringFormatNode.vcproj
[2010.09.06 01:30:44 | 000,012,811 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\testNobjectNode.cpp
[2010.09.06 01:30:44 | 000,001,090 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\testNobjectNode.h
[2010.09.06 01:29:00 | 000,001,114 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\testNobjectNode.sln
[2010.09.06 01:29:00 | 000,009,096 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\testNobjectNode.vcproj
[2010.09.06 01:30:28 | 000,006,744 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\weightListNode.cpp
[2010.09.06 01:29:04 | 000,001,112 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\weightListNode.sln
[2010.09.06 01:29:04 | 000,008,910 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\weightListNode.vcproj
[2010.09.06 01:30:46 | 000,004,263 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\yTwistNode.cpp
[2010.09.06 01:29:04 | 000,001,104 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\yTwistNode.sln
[2010.09.06 01:29:04 | 000,008,893 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\yTwistNode.vcproj
[2010.09.06 01:29:06 | 000,006,365 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\scripted\footPrintNode.py
[2010.09.06 01:29:06 | 000,004,374 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\plug-ins\scripted\yTwistNode.py
[2010.12.29 20:44:29 | 000,000,233 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\API\ftv2lastnode.png
[2010.12.29 20:44:29 | 000,000,160 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\API\ftv2mlastnode.png
[2010.12.29 20:44:29 | 000,000,165 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\API\ftv2plastnode.png
[2010.12.29 20:44:33 | 000,003,996 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\Commands\listNodeTypes.html
[2010.12.29 20:44:34 | 000,009,676 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\Commands\scriptNode.html
[2010.12.29 20:44:35 | 000,003,093 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\Commands\setNodeNiceNameResource.html
[2010.12.29 20:44:35 | 000,004,038 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\Commands\setNodeTypeFlag.html
[2010.12.29 20:44:41 | 000,004,234 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\CommandsPython\listNodeTypes.html
[2010.12.29 20:44:47 | 000,010,037 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\CommandsPython\scriptNode.html
[2010.12.29 20:44:48 | 000,004,276 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\CommandsPython\setNodeTypeFlag.html
[2010.12.29 20:45:54 | 000,020,492 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\images\MED\Sherlock\CharSetup\comp_floorContactNodeHandle.png
[2010.12.29 20:47:49 | 000,000,244 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\_sources\generated\classes\pymel.core.nodetypes\pymel.core.nodetypes.HIKControlSetNode.txt
[2010.12.29 20:48:02 | 000,000,137 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\_sources\generated\functions\pymel.core.general\pymel.core.general.listNodeTypes.txt
[2010.12.29 20:48:13 | 000,000,149 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\_sources\generated\functions\pymel.core.runtime\pymel.core.runtime.ConnectNodeToIKFK.txt
[2010.12.29 20:48:15 | 000,000,206 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\_sources\generated\functions\pymel.core.runtime\pymel.core.runtime.nucleusDisplayDynamicConstraintNodes.txt
[2010.12.29 20:48:15 | 000,000,185 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\_sources\generated\functions\pymel.core.runtime\pymel.core.runtime.nucleusDisplayNComponentNodes.txt
[2010.12.29 20:48:17 | 000,000,125 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\_sources\generated\functions\pymel.core.system\pymel.core.system.scriptNode.txt
[2010.12.29 20:48:18 | 000,000,143 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\_sources\generated\functions\pymel.core.windows\pymel.core.windows.setNodeTypeFlag.txt
[2010.12.29 20:47:00 | 000,012,338 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\generated\classes\pymel.core.nodetypes\pymel.core.nodetypes.HIKControlSetNode.html
[2010.12.29 20:47:11 | 000,009,920 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\generated\functions\pymel.core.general\pymel.core.general.listNodeTypes.html
[2010.12.29 20:47:15 | 000,009,352 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\generated\functions\pymel.core.runtime\pymel.core.runtime.ConnectNodeToIKFK.html
[2010.12.29 20:47:17 | 000,009,640 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\generated\functions\pymel.core.runtime\pymel.core.runtime.nucleusDisplayDynamicConstraintNodes.html
[2010.12.29 20:47:17 | 000,009,600 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\generated\functions\pymel.core.runtime\pymel.core.runtime.nucleusDisplayNComponentNodes.html
[2010.12.29 20:47:33 | 000,014,598 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\generated\functions\pymel.core.system\pymel.core.system.scriptNode.html
[2010.12.29 20:47:35 | 000,011,405 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\PyMel\generated\functions\pymel.core.windows\pymel.core.windows.setNodeTypeFlag.html
[2010.12.29 20:48:22 | 000,000,233 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\Shaders\ftv2lastnode.png
[2010.12.29 20:48:22 | 000,000,160 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\Shaders\ftv2mlastnode.png
[2010.12.29 20:48:22 | 000,000,165 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\Shaders\ftv2plastnode.png
[2010.09.06 02:55:18 | 000,000,233 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Shaders\ftv2lastnode.png
[2010.09.06 02:55:18 | 000,000,160 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Shaders\ftv2mlastnode.png
[2010.09.06 02:55:18 | 000,000,165 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Shaders\ftv2plastnode.png
[2010.09.06 01:30:58 | 000,001,367 | ---- | M] () -- \Program Files\Autodesk\Maya2011\resources\l10n\ja_JP\scripts\AEclusterHandleWtNodeNew.res.mel
[2010.09.06 01:31:56 | 000,001,367 | ---- | M] () -- \Program Files\Autodesk\Maya2011\resources\l10n\ja_JP\scripts\AEsoftModHandleWtNodeNew.res.mel
[2010.09.06 01:34:44 | 000,001,433 | ---- | M] () -- \Program Files\Autodesk\Maya2011\resources\l10n\ja_JP\scripts\scriptNodes.res.mel
[2010.09.06 01:41:50 | 000,003,296 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\AETemplates\AEclusterHandleWtNodeNew.mel
[2010.09.06 01:41:50 | 000,001,362 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\AETemplates\AEclusterHandleWtNodeNew.res.mel
[2010.09.06 01:41:50 | 000,003,287 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\AETemplates\AEsoftModHandleWtNodeNew.mel
[2010.09.06 01:41:50 | 000,001,362 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\AETemplates\AEsoftModHandleWtNodeNew.res.mel
[2010.09.06 01:43:06 | 000,001,774 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\obsolete\readAnimationScriptNode.mel
[2010.09.06 01:43:04 | 000,002,172 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\obsolete\writeAnimationScriptNode.mel
[2010.09.06 01:36:46 | 000,003,656 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\connectNodeToAttrOverride.mel
[2010.09.06 01:36:46 | 000,005,403 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\connectNodeToNodeOverride.mel
[2010.09.06 01:37:26 | 000,003,154 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\isValidAttrPresetNodeType.mel
[2010.09.06 01:39:02 | 000,001,974 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\performNucleusDisplayDynamicConstraintNodes.mel
[2010.09.06 01:39:02 | 000,001,931 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\performNucleusDisplayNComponentNodes.mel
[2010.09.06 01:36:14 | 000,001,620 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\readAnimationScriptNode.mel
[2010.09.06 01:35:56 | 000,015,490 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\scriptNodes.mel
[2010.09.06 01:35:56 | 000,001,414 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\scriptNodes.res.mel
[2010.09.06 01:37:40 | 000,002,004 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\selectNodesInCharacter.mel
[2010.09.06 01:37:22 | 000,002,348 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\setNodeDefaultsForOldPresets.mel
[2010.09.06 01:35:54 | 000,002,395 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\setNodeNiceNameResource.mel
[2010.09.06 01:36:14 | 000,001,661 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\writeAnimationScriptNode.mel

< *TemDono* /s >

< *AutoKMS* /s >

< *KMSEmulator* /s >

< *activator* /s >
[2010.03.27 04:58:48 | 000,002,319 | ---- | M] () -- \Users\martin\AppData\Local\Adobe\Flash CS5\cs_CZ\Configuration\Classes\mx\skins\halo\ActivatorSkin.as
[2010.03.27 04:58:48 | 000,001,806 | ---- | M] () -- \Users\martin\AppData\Local\Adobe\Flash CS5\cs_CZ\Configuration\Classes\mx\skins\sample\ActivatorSkin.as
[2011.07.11 16:53:42 | 000,000,209 | ---- | M] () -- \Users\Public\Documents\Unity Projects\AngryBots\Assets\Scripts\Fx\DeactivatorOnLowQuality.js

< *serial* /s >
[2007.06.01 04:40:21 | 000,000,029 | ---- | M] () -- \Martin\``install\Adobe After Effects CS3 Professional\Crack\serial.txt
[2007.09.11 10:19:06 | 000,003,982 | ---- | M] () -- \Martin\``vyuka\Script\Manual HTML, PHP, Java\Manual_WWW-_PHP-_Java\Manual_WWW-_PHP-_Java\Manual WWW, PHP, Java\www_3\Navod HTML\Manual PHP\function.serialize.html
[2007.09.11 10:19:51 | 000,003,787 | ---- | M] () -- \Martin\``vyuka\Script\Manual HTML, PHP, Java\Manual_WWW-_PHP-_Java\Manual_WWW-_PHP-_Java\Manual WWW, PHP, Java\www_3\Navod HTML\Manual PHP\function.unserialize.html
[2007.09.11 10:23:50 | 000,002,454 | ---- | M] () -- \Martin\``vyuka\Script\Manual HTML, PHP, Java\Manual_WWW-_PHP-_Java\Manual_WWW-_PHP-_Java\Manual WWW, PHP, Java\www_3\Navod HTML\Manual PHP\function.wddx-deserialize.html
[2007.09.11 10:23:50 | 000,002,649 | ---- | M] () -- \Martin\``vyuka\Script\Manual HTML, PHP, Java\Manual_WWW-_PHP-_Java\Manual_WWW-_PHP-_Java\Manual WWW, PHP, Java\www_3\Navod HTML\Manual PHP\function.wddx-serialize-value.html
[2007.09.11 10:23:50 | 000,003,824 | ---- | M] () -- \Martin\``vyuka\Script\Manual HTML, PHP, Java\Manual_WWW-_PHP-_Java\Manual_WWW-_PHP-_Java\Manual WWW, PHP, Java\www_3\Navod HTML\Manual PHP\function.wddx-serialize-vars.html
[2007.04.05 23:21:44 | 000,001,673 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\BadSerialNumberAlert.exv
[2007.04.05 23:21:44 | 000,001,545 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\CantChangeSerialNumberAlert.exv
[2007.04.05 23:21:44 | 000,001,639 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\InValidUpGradeSerialNumberAlert.exv
[2007.04.05 23:21:44 | 000,000,833 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\ReserializeAlert.exv
[2007.04.05 23:21:44 | 000,028,474 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\SerializationWF.exv
[2007.04.05 23:21:44 | 000,001,695 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\ar_AE\BadSerialNumberAlert.exv
[2007.04.05 23:21:44 | 000,001,567 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\ar_AE\CantChangeSerialNumberAlert.exv
[2007.04.05 23:21:44 | 000,001,661 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\ar_AE\InValidUpGradeSerialNumberAlert.exv
[2007.04.05 23:21:44 | 000,000,855 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\ar_AE\ReserializeAlert.exv
[2007.04.05 23:21:46 | 000,028,485 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\ar_AE\SerializationWF.exv
[2007.04.05 23:21:46 | 000,001,695 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\he_IL\BadSerialNumberAlert.exv
[2007.04.05 23:21:46 | 000,001,567 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\he_IL\CantChangeSerialNumberAlert.exv
[2007.04.05 23:21:46 | 000,001,661 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\he_IL\InValidUpGradeSerialNumberAlert.exv
[2007.04.05 23:21:46 | 000,000,855 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\he_IL\ReserializeAlert.exv
[2007.04.05 23:21:46 | 000,028,485 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS3\Support Files\LMResources\he_IL\SerializationWF.exv
[2007.03.14 18:05:52 | 000,001,673 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\BadSerialNumberAlert.exv
[2007.03.14 18:05:52 | 000,001,545 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\CantChangeSerialNumberAlert.exv
[2007.03.14 18:05:52 | 000,001,639 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\InValidUpGradeSerialNumberAlert.exv
[2007.03.14 18:05:52 | 000,000,833 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\ReserializeAlert.exv
[2007.03.14 18:05:52 | 000,028,474 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\SerializationWF.exv
[2007.03.14 18:05:52 | 000,001,695 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\ar_AE\BadSerialNumberAlert.exv
[2007.03.14 18:05:52 | 000,001,567 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\ar_AE\CantChangeSerialNumberAlert.exv
[2007.03.14 18:05:52 | 000,001,661 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\ar_AE\InValidUpGradeSerialNumberAlert.exv
[2007.03.14 18:05:52 | 000,000,855 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\ar_AE\ReserializeAlert.exv
[2007.03.14 18:05:52 | 000,028,485 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\ar_AE\SerializationWF.exv
[2007.03.14 18:05:54 | 000,001,695 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\he_IL\BadSerialNumberAlert.exv
[2007.03.14 18:05:54 | 000,001,567 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\he_IL\CantChangeSerialNumberAlert.exv
[2007.03.14 18:05:54 | 000,001,661 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\he_IL\InValidUpGradeSerialNumberAlert.exv
[2007.03.14 18:05:54 | 000,000,855 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\he_IL\ReserializeAlert.exv
[2007.03.14 18:05:54 | 000,028,485 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\LMResources\he_IL\SerializationWF.exv
[2007.03.15 11:19:10 | 000,001,673 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\BadSerialNumberAlert.exv
[2007.03.15 11:19:10 | 000,001,545 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\CantChangeSerialNumberAlert.exv
[2007.03.15 11:19:10 | 000,001,639 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\InValidUpGradeSerialNumberAlert.exv
[2007.03.15 11:19:10 | 000,000,833 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\ReserializeAlert.exv
[2007.03.15 11:19:10 | 000,028,474 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\SerializationWF.exv
[2007.03.15 11:19:10 | 000,001,695 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\ar_AE\BadSerialNumberAlert.exv
[2007.03.15 11:19:10 | 000,001,567 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\ar_AE\CantChangeSerialNumberAlert.exv
[2007.03.15 11:19:10 | 000,001,661 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\ar_AE\InValidUpGradeSerialNumberAlert.exv
[2007.03.15 11:19:10 | 000,000,855 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\ar_AE\ReserializeAlert.exv
[2007.03.15 11:19:12 | 000,028,485 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\ar_AE\SerializationWF.exv
[2007.03.15 11:19:14 | 000,001,695 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\he_IL\BadSerialNumberAlert.exv
[2007.03.15 11:19:14 | 000,001,567 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\he_IL\CantChangeSerialNumberAlert.exv
[2007.03.15 11:19:14 | 000,001,661 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\he_IL\InValidUpGradeSerialNumberAlert.exv
[2007.03.15 11:19:16 | 000,000,855 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\he_IL\ReserializeAlert.exv
[2007.03.15 11:19:16 | 000,028,485 | ---- | M] () -- \Program Files\Adobe\Adobe Device Central CS3\LMResources\he_IL\SerializationWF.exv
[2010.03.27 06:01:10 | 000,577,984 | ---- | M] () -- \Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\boost_serialization.dll
[2010.03.10 03:11:04 | 000,013,312 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2011\MaxSerialization.dll
[2010.12.29 20:45:22 | 000,005,853 | ---- | M] () -- \Program Files\Autodesk\Maya2011\docs\Maya2011\en_US\files\Glossary_S_serial_number.htm
[2010.09.06 01:30:48 | 000,003,539 | ---- | M] () -- \Program Files\Autodesk\Maya2011\include\maya\mocapserial.h
[2009.07.06 15:31:46 | 000,002,502 | ---- | M] () -- \Program Files\Common Files\Autodesk Shared\AdLM\R1\en-US\Webdepot\RTSerialNumberHelp.html
[2009.07.06 15:31:46 | 000,002,502 | ---- | M] () -- \Program Files\Common Files\Autodesk Shared\AdLM\R3\en-US\Webdepot\RTSerialNumberHelp.html
[2009.12.16 17:00:24 | 000,034,732 | ---- | M] () -- \Program Files\Common Files\Autodesk Shared\DirectConnect2010\javadocs\serialized-form.html
[2012.04.11 01:15:28 | 000,434,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.dll
[2012.06.01 21:33:00 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.ni.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:23 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012.05.14 19:47:14 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\2ff4e90c5842525f7a7456639de090d8\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012.05.15 09:13:38 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll
[2012.05.15 14:18:33 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5a4d233916a69d48fa12a9f7f103d893\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012.05.15 14:18:58 | 002,647,040 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8a9fac9cb825b5d2db0bdb867fff940e\System.Runtime.Serialization.ni.dll
[2012.05.15 15:22:19 | 000,009,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
[2012.06.15 20:18:34 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012.06.15 20:18:32 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012.06.15 20:18:37 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011.04.06 16:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009.07.14 10:43:17 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\drivers\serial.sys
[2009.07.14 10:43:30 | 000,009,728 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\serial.sys.mui
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89\smserial.sys
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14\grserial.sys
[2009.07.14 04:18:03 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 04:18:03 | 000,015,952 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486_kdcom.dll_db5e7744
[2009.07.14 10:43:55 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 04:18:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2009.07.14 10:42:43 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2009.07.14 03:49:26 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 03:45:27 | 000,000,866 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_2c93290b67c98d09.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 10:43:23 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\winsxs\x86_mdmmotsm.inf_31bf3856ad364e35_6.1.7600.16385_none_7a97936f8a972896\smserial.sys
[2009.07.14 10:43:15 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c002c1170ca9a88f\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_c233d4df09982c29\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.14 10:43:17 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:30 | 000,009,728 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c48c78a9ad8ff996\serial.sys.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_f86e06d519b1d9a4\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_7280378295916274\grserial.sys
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll

< *w7lxe* /s >

< *AutoRearm* /s >

< HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s >
"RtHDVCpl" = C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -- [2009.03.30 12:03:56 | 007,289,376 | ---- | M] (Realtek Semiconductor)
"00PCTFW" = "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s -- [2010.01.12 11:41:00 | 003,168,216 | ---- | M] (PC Tools)
"avgnt" = "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min -- [2012.08.19 11:12:45 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG)
"AdobeAAMUpdater-1.0" = "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" -- [2012.04.04 06:09:46 | 000,446,392 | ---- | M] (Adobe Systems Incorporated)
"AdobeCS6ServiceManager" = "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin -- [2012.03.09 16:26:58 | 001,073,312 | ---- | M] (Adobe Systems Incorporated)
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
"" =
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"" =
"Installed" = 1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"" =
"Installed" = 1
"NoChange" = 1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"" =
"Installed" = 1

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"AdobeBridge" =
"Google Update" = "C:\Users\martin\AppData\Local\Google\Update\GoogleUpdate.exe" /c -- [2011.01.10 22:16:24 | 000,136,176 | ---- | M] (Google Inc.)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =

< HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.09.17 20:01:19 | 000,000,512 | ---- | M] () MD5=9D2248B9B69E2814EC5DE6DF6E1FBE87 -- C:\PhysicalMBR.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:B879A65B
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A8ADE5D8
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 1160 bytes -> C:\ProgramData\Microsoft:2sbD2jNNxi80ib91qoyeUq3CmKEq
@Alternate Data Stream - 1144 bytes -> C:\ProgramData\Microsoft:CZqNa8AcbjxxSHfrZ4xptHXCp
@Alternate Data Stream - 1123 bytes -> C:\Users\martin\AppData\Local\BUQaQwilyhQp:FhHnLouJjDukMMQGMTP
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C31F31E6

< End of report >

OTL Extras logfile created on: 17.9.2012 19:59:29 - Run 1
OTL by OldTimer - Version 3.2.61.5 Folder = C:\Users\martin\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.25 Gb Total Physical Memory | 2.21 Gb Available Physical Memory | 68.16% Memory free
6.50 Gb Paging File | 5.31 Gb Available in Paging File | 81.77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 116.61 Gb Free Space | 50.07% Space Free | Partition Type: NTFS

Computer Name: LULU | User Name: martin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.scr [@ = DWGTrueViewScriptFile] -- "" "%1"

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [CEWE prezentace fotografií] -- "C:\Program Files\Fotostar\Fotostar Offline client4\CEWE prezentace fotografií.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Fotostar Offline client4] -- "C:\Program Files\Fotostar\Fotostar Offline client4\Fotostar Offline client4.exe" "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{077C0237-EFDC-4156-A532-02710DFA156B}" = rport=445 | protocol=6 | dir=out | app=system |
"{15FDE95C-F0C6-4D06-9315-9978769094F4}" = rport=137 | protocol=17 | dir=out | app=system |
"{1B839CD5-85F5-4A3C-A2C7-71B5CA039D29}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1BCBCFEA-64EE-40C2-884F-DC4481005AC2}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1D2913E8-ABAE-420D-A921-1ECC16A41D3A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{28002C6E-AF8C-40DE-8C9B-392E9342D944}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{36B3E593-E6E2-4FCC-9D11-318A5E574E45}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{42D45E90-3A5B-4489-8A02-7AAF57A09F80}" = rport=10243 | protocol=6 | dir=out | app=system |
"{4C339E29-9CA7-4126-B7C8-CE7B82820073}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{66E72F65-5C2F-46E8-A2E1-4E30E2B36D59}" = lport=10243 | protocol=6 | dir=in | app=system |
"{677BEF0D-3EE9-488B-B6C5-5F270B0D85EB}" = lport=445 | protocol=6 | dir=in | app=system |
"{7AD60AE2-45DE-4C32-93A3-975169356DD6}" = lport=137 | protocol=17 | dir=in | app=system |
"{8CED5AA0-EDCA-4AF5-A334-BAB028EF3A77}" = rport=139 | protocol=6 | dir=out | app=system |
"{A951EBBE-E41E-4550-A65C-560E1ABE6B96}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B8758CB4-5FF5-47DA-B2A0-3AF289DA7A26}" = lport=139 | protocol=6 | dir=in | app=system |
"{C31A5194-397F-4AEF-B3F6-39CA882C6AA8}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{CEC6B55E-A53C-414E-B95B-511B4FAD8B7E}" = rport=138 | protocol=17 | dir=out | app=system |
"{D0125B33-C9E4-4168-8C06-FF58910C6CCD}" = lport=138 | protocol=17 | dir=in | app=system |
"{D02E6728-C6EE-445B-A44D-81D40E6E74A0}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D33AE72F-0EB7-43F5-AC5D-2039C8737D33}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D75CE472-BB0B-4746-AB00-A75AAE562B26}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E5CB2120-7060-4548-837A-A0DB10C7C71F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{E976EF1E-7616-43BF-9732-DCAD358C96B7}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{FE9DD644-B7D4-47DB-A0BA-77432343AF4E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{039D7042-0471-42C2-ADE0-30EE703CF99F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{04661BE7-468C-44BA-AD52-271BF9E20CC7}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_32.exe |
"{05F676B9-3223-4D4A-9D8D-5B7AEB270DC3}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{087A6710-B26B-4E5F-A4B4-16BDB3DCE9ED}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{08E81C49-9644-44DC-8396-3C05C8EE361E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{09449720-90BF-49C2-9C11-6AEF62D58736}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0B3B223A-E941-4683-9F62-5C25DC77B51C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0CF623E8-2F28-4A0A-8B52-12509738B821}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0D5DE6B1-A92B-4767-9460-71AEFAB89EEE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0D65FBDC-C199-4E43-AC50-C031DC2E4540}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0F8B3955-4A3C-4682-B425-20A72B24C2D9}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0FC7DCBE-BAE4-41D2-8F62-BA39A2734A11}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{10EAD166-E527-44B6-B3AD-5E41426361C4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{116743F8-F27F-49C3-8276-16AC295FDA0A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{119F2184-3CEF-49D3-9659-806133CA4D46}" = protocol=6 | dir=in | app=c:\users\martin\appdata\roaming\dropbox\bin\dropbox.exe |
"{12DAF36A-FB1A-4CB7-AFFD-E05E3BA88CD8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{147E3EA8-3767-4F65-A114-3B14BC266FCA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{159121C6-DD20-484F-AFDF-D29D3BCC2E39}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{16EE2672-CC35-4457-B930-43A8435B9B2B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1773E1FA-6962-49DD-91AB-F4DBFEAE2512}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{190767FD-1C4D-4105-A31F-3915AF2A26C9}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{190F51D7-E502-4A3A-8509-23C0D362C333}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{19FA8C4C-66B9-42BE-8ABA-A668DFE7BAB2}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1B171B22-5C80-43A6-ABED-F80203BD4376}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1B7F6F86-FFBF-4204-A610-1096455DF2D5}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1C12D011-3F5D-45BF-8E63-8DAC8DF22F6E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1D071662-FA4D-4F1E-B1A6-3F00A756E6C0}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1EA1731E-1BAD-495C-AF52-01E7BE58F25B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1EE66EB8-5BAD-4B7C-9DE9-78EEE3C065C2}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{200C1207-084C-4666-862C-E490678CDA08}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2069402A-CE2D-4EC3-9063-B34E1E00EB6A}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{216F6E67-02B3-45CA-A3D7-B9789A39F19B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{21C3EB70-3551-4467-865E-BAE7AFF90772}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2291888E-08E1-40DA-B7D2-0EF14F57C040}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{23F8836F-3DEE-4372-AA94-8C005E5F79E6}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2431E697-9715-4446-8019-BAB244E6D720}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{256A0B47-1F53-4BCD-8975-F07DD95C5552}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{25993BC6-B8D7-43D7-9807-9BE10FB9DA21}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{26089A6F-6D31-4862-AFAF-3F4DB063356D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{26B1E422-7115-4F8C-8D6F-25FADCBA8A4A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{272101F8-02FA-4790-ADA2-84BB8AC6381A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{29226442-D5FD-4F88-9905-9CECAC7AF07A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{294F42B4-F485-4920-BF3B-F3455207D675}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2A80907E-3DB9-43A2-A103-ACE9FC0EE2B5}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2C86668A-84AD-4BC8-832A-204ED4BBF527}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2EC1702B-F153-4EE5-BAAC-0D798D7C4F12}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{301D9ED0-983A-445F-8F7E-7696A77399FD}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{30DD24A9-FBE0-4A87-9790-6C48869C7A4F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{312A923C-73C1-461E-9C96-15CC577533E2}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{32091EEB-87CF-41BB-B4AA-7929A5D9A9F5}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{32856062-D628-4EEF-A712-921288E87CED}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{331EEAA7-A937-43D7-9EDA-4452BED1E2C8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{335436E2-E607-47D4-A54C-F4688B31BF6B}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{35DE78ED-3258-42A4-BAAD-70F099E6D81E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{37C9A998-B48D-49FE-86C5-8D89FBA0E90C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{37CB8E8A-9AD1-4730-AA67-D562E1195352}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{37F4FC51-13C0-4F74-9F20-922760172926}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{38DF0E6B-5BB8-424D-BE67-2FB1417DCEE2}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{3A45305C-DEFD-4D70-91A4-9BD7BCAA7DCE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3AD16D6B-B6DC-4212-ACCC-BB04098A1672}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3AF17BD5-BA6F-4ECA-B16B-0A1815204E37}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3B49E287-E89A-4939-8826-58541B2CC0E9}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3C084749-26B8-46E5-80A1-AB9A32F35630}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3CD34E2D-67FA-428B-9EA8-0249C9C4D9D1}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3D7CF37B-E63E-4BCE-B97A-E33829735FC1}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{402F5A29-5CB9-453F-B34D-FDDBEA6E8E7B}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{4095F630-2F26-4D22-AE6E-736DBB4F04B8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{41711C9F-45B0-4C52-A663-A55D9230BC73}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{42019B6F-51BD-4DD6-8865-D2D979D4E55B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4269F6D9-1D56-448E-9418-72ABB1E91140}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{433EE4B9-B474-4964-BCE6-2412CFB3E5EE}" = protocol=6 | dir=in | app=c:\users\martin\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{44AA5481-9670-4E69-A1BB-0F6536B3A09E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{44CC7058-532A-4608-9B0A-6B50C81BF783}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4503CACE-415E-480A-990D-C215A7D784A5}" = protocol=17 | dir=in | app=c:\users\martin\appdata\roaming\dropbox\bin\dropbox.exe |
"{45199633-93E7-4306-90FD-A9C821A80984}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{46572DFB-9D7A-4005-9C78-FE70A7098CDF}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{497C73C9-7054-4E63-AEDE-7286B3FFC936}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4B6B8857-5497-4E1C-A11C-198EDE31272D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4CD09F2E-0CA5-4547-A626-E3B65D73A663}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4F564B6A-D49D-4F18-8B9C-6F4F394FD534}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4F5BE46C-3C51-455C-9245-E1CB686ADC45}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{50585134-FECD-4BAF-9020-225875BF0D63}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{50FA26AB-491C-463F-A1E2-3A1334E5B149}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{522E6136-181A-4E2E-9936-DDDAD475CD06}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{53483C66-6B80-4DB3-8A6C-D06D4DC79862}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{53C9C9B0-39D3-416D-B092-ADB6F24EF9DE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{542E62DC-CBA0-4B2E-B736-260425840411}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{55E2F8F3-3B85-42C5-B927-91BF333C2F8C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5672965A-80A8-4E01-B1B2-4CBAE9D388BF}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\3dsmax.exe |
"{569D7078-077C-4F87-9A7D-70C155E4DE67}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{58C2278A-33C4-42B5-8B45-7A45DBDF8507}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{58C99206-1C5B-4E25-9320-990E62DF09CA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{596E8FD0-DBCB-4FF8-934C-6F619A9B6605}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{59A3918B-42E6-4395-906E-6CF8CC958494}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5A10A6E0-53E5-4AC8-8262-A12C75E6390D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5AB96E11-2C83-43E9-9A68-674ED16847BA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5B8115C1-759A-46C9-8B2D-AD7F6245129B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5BA957DD-3AEC-4204-A184-3465144C9FE7}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5D35FC1F-DA31-4066-9F79-5C0FFE9929FF}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5DB6B1EE-4749-45CB-B8CE-BDC90F35C1BE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5F4452DD-04E3-4950-BC8D-91FD8750CF2E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5F933055-2C54-43CF-9D46-19FE25BFFA25}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{602C10A7-6039-46C3-A803-17B744F3F150}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{606E192F-ECFC-4C69-8043-989F8CA12078}" = protocol=6 | dir=in | app=c:\users\martin\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{61068884-E0EE-444F-BAE5-60319A13FB35}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{62AF1772-A253-43C7-B20B-EEB0F36E3A8E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{63FAA242-E537-4EC5-9A44-34427CB88221}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6512D83F-92B5-450E-8E98-56A8665D70E5}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{65701BCA-CFF7-4126-9CBE-9F2973AF0730}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{66DDD201-5C87-4532-8C8D-ADB8EF10BD0B}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{67F91E87-1628-4A78-9DA9-6992BF21E19F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{692D374C-00CF-4C31-A882-CDD930C38350}" = protocol=17 | dir=in | app=c:\users\martin\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{6A0FBC23-7508-4A40-84FD-48CF28B0849C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6A207B53-D373-480A-A57F-C0813D311FF5}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6A2C9A06-26F1-42E4-BEDE-D161D901674D}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{6ADF693E-3121-4FCE-A9F2-4BBFA3FB2F31}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6B121B36-58F7-447F-ACBC-C26CCBB1E320}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6BE71BFD-C05C-4A01-AB16-24B64341A0D3}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6CAAA89B-DC5C-4E1C-A728-27D23C5E443F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6E0E979F-7E1B-46D5-9662-5CE9C0D7EDCE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6E3E0547-B485-4000-9E73-867540AD8437}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7043AE4D-4F76-4DF6-964F-82079988597D}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{7080E0F0-E97C-4502-9B94-792922DF0B7C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7188E8CB-9687-46D1-A23C-5C15E48257DB}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_32.exe |
"{73C0DE5F-C8C4-454C-A6EA-3F6C1A0C9972}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7402CA8B-80B7-49D1-9A6E-0D68C1D0D8D0}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{75044CA5-C11A-4700-8E29-3FC612F47A5D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{76F1DDF2-9176-41EF-B9D5-DA4B2CDAFBEB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7703CD56-5C35-47E2-96FF-2215B12986EA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{770F7A9D-6848-4821-A730-E227D4129445}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{77F55D4B-0988-4E9A-B72F-8F770A58B08D}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{787A0ED2-B4DE-4664-9CF9-1216B885DD02}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{79A4EA76-D239-466D-90FC-1F1B583FC902}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{79F17FAE-F83C-4146-A57A-2C3692CE2D22}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7F9866A2-0952-4CA5-81FA-79A288343C17}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{80BD1D7B-C7BB-4481-AE70-928162A7B430}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{82449E33-860F-40F9-BA67-2469D6B02494}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{827938D3-EDC8-4984-860A-0D3949671AAE}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{8408E105-83DC-4A09-8BB6-3D9F016EAE18}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{850C1B43-D604-489F-B9DD-0E65279A5A13}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{86975A4D-D54F-4855-BAEA-17F2EDC55661}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{878BD980-5C43-4DCF-9731-6C9C2ED23377}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{88D653DE-6AE9-4565-B54C-D501CCA2F4C4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8908BABB-757C-400A-A2CE-96902FE35EFB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{89493F21-598A-415E-99EB-CDDBE49061A1}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{894AD673-2085-483D-84FD-BC4FDD04E781}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{89F4F438-39F2-42AF-B69C-4CB900B10CBF}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8CD06F0C-1DE4-4DF5-A11B-543F98C40F6B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8DCCB41C-883C-42AC-BFDB-C961F114DAE9}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{8E0517F5-9B66-4091-B8E2-79267F5F886B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8EBE28C6-6443-44AB-B1BD-61700CF8DE52}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8F8C8C6C-865A-4859-B13E-CBB3E4FEB706}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{906520CE-8F00-4D62-B495-12123E43692B}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{90904DB2-CD70-4F32-8E94-567C19B76164}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{91D85F8D-F7AF-4ED1-8876-C615D6B42D0A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{93309C45-8F8C-43F5-ADA2-82B357729C0D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{93848909-F6EC-4A99-9FDB-86F693E1CD0E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{93A58910-5FD8-4774-BD6F-3447F6C0BEFD}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{954F6BED-0E4D-4C17-9DBB-DDCD4A29420E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{95577E13-44ED-485A-B7BA-275D7C1FA99E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{95A43833-36CA-4A06-8024-4CE94AD87EF6}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{96302168-C14D-4498-B206-2E1641E7FB6E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{98817143-7D17-454F-9FBF-B360681D2B06}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{98C5553D-9C7B-483E-A9C2-D6DF3606E699}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9B5BF7A0-0C23-4709-A650-89986DA374FA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9BE9A766-5D79-4396-9771-ACAA9BDE753D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9CBA7790-95EC-4F17-9EB7-44D5228A5D0E}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{9D49E2A1-1B8D-4133-9330-CE0F830EE8FB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9D980017-8EEB-4EED-ADB7-4C0C88058841}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9DD496C6-3006-4185-A8C6-F15B3FE8A989}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{9E47B029-DE38-4480-8778-1BA953A85556}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9F1AD66C-1BDC-4C11-BF26-D75FB925251D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A14D9144-02C2-42C5-83C9-846531C1E193}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A2231AEE-FCD0-4916-A5CA-CE039C17ABD6}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A459C675-E4A6-4C87-A439-3DC62D6B2A44}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A5CDB8D4-BD52-4A83-B326-C1FBE4D149F8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A621880F-2959-4EDA-9BCF-09F3E219E1D4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{AEF9E262-DB59-4806-95A0-124438419DD4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B122DC38-F308-43CF-94EE-CB8005B966A7}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B12D0C77-7ABB-4D1E-BCD7-1CED910B498C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B220F105-1C53-4BC7-B960-A8EBA1FBB37A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B28E8AAF-1A70-42F3-9019-F8305F772558}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B38537CE-E4D8-489E-8839-DFA6DA589744}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B3A440F4-5938-4F94-A8B5-1A2C2A8AF119}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B3D6E0D5-8E99-43AF-BE79-4A5DCBAB4B9A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B4E892D6-4F9F-437F-B4C7-EAFE89A64CB4}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe |
"{B53DD10C-9231-43F6-8F47-79B8A2D402E0}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B749F793-9CB9-4599-9668-2DDEB9E17D8D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B94C12CA-3337-4435-9506-338150FF305A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BA76C233-EC4C-4E38-B9B0-40E44FF92AEC}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BACFD58A-CFE9-4B36-AEAA-3804C06F7BBA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BBCA081C-9292-4320-834F-35432A20BE0D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BCB9E299-8C4A-4917-92E5-2051906A6DDA}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{BCD75A8A-8EBF-4185-A0E1-2260FF4C8182}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BD1AE83C-22C5-4B20-8C2A-06A164796B11}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C0048FDE-B95C-4060-94EE-0166DD476901}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{C026EAF1-44A4-43FF-A1AD-CB26ADE97061}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C258C6B8-9F46-434D-BB4B-83EFF345E5F7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C33C9002-F5F2-4A14-ABD7-7AE1919170F3}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C41A1E8E-1D02-4592-B56D-F9383A6DDDBB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C4B7ACC1-4CF2-457F-9D65-922D962C3507}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C52BD0CB-B41E-476F-BA05-985101043B66}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C6B20D40-31E8-4651-9B85-DDFF34CE0818}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{C76FA427-6326-433C-BE20-42922FB0A02D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C83F85A4-5630-45BA-B7C7-FA0FCC484C70}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C912CE8A-E078-4A6E-9808-68B05F6F771C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CA498D44-D94D-4091-9951-B449BA0E6510}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CAAE87D6-57EA-4B05-9273-115BD8434322}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CAC4A5F2-FD49-486C-83BF-FB6B93D61245}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CAF7AA12-417C-4C82-802C-47111C87C66A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CAFA501E-09CE-4ACB-A3FF-207519AE5AEE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CB60C542-F36B-4C32-AD70-D58C9F70CC2E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CBAAA1D0-4E8C-4B98-8480-D09EAFF6F01A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CDFDDFA2-693D-433B-A25F-070DA15E9556}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CE244C83-8D78-491B-95AC-37A92BAA2DE4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CE555D90-E76A-4373-B9A9-DC0F58754D08}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{CF17C449-A566-4737-A570-CB295B13CE6F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CFAC75CE-DFF2-436F-B77B-703C4AD604EF}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D11B9D05-F3B5-471D-BF07-C4D853C5BE38}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D243E6C9-0572-4F9C-940B-4AAEF7E8D125}" = protocol=6 | dir=out | app=system |
"{D30EFED2-3E12-4078-89C4-0DB412086B16}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe |
"{D369421E-4D29-4E9C-8032-0B04A2B76D60}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D3C39749-F86F-4822-98E2-49DAC2B4F203}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D3C60DB6-02FC-49F7-9F98-0C8760B8C112}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{D3DA15AD-A8F5-407E-9100-27C6CDDB6A4F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{DA106A3E-04CC-45B7-8BCF-4A4B3B47C2A1}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{DB77A1DA-3A53-4E13-BA23-B08F928FC532}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{DEA5D1C6-AB6D-43A4-AB6D-3302C9DB347D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E0770612-C0C2-48CF-B856-81A98C6CB679}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E08F25FF-2BEE-4022-986B-B0BE346DFB04}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{E1CF5A88-55F1-4CE2-9F5C-981A85CBF602}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E1F933DA-E385-4E5E-A574-0CC3CA4C17BA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E24CB05F-734C-47C5-8F14-376042E34A28}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E290C8E1-16CA-4E8C-81DB-2BC419091E51}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E35118AD-8ABF-48CC-B0E6-0BDC2F19205C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E3E6206A-55E4-4832-B00A-D4805EB4889F}" = protocol=17 | dir=in | app=c:\users\martin\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{E550792C-E505-49D2-A530-E2618785AA0F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E7897090-10AC-48FE-AEA5-2BE6AF4712EC}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E82FF0FE-ECB9-4201-AB01-BC8524A14249}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E8D96BC4-F6E8-475F-93D7-009A4912BD8B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EA149798-33C5-4BAC-AB7C-2DB43E869D64}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EA1C2A29-3D36-4D56-963C-ED0AB8E28210}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EA3973F3-5E38-47B4-B972-5822D445A050}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{EC74ADD3-1752-4FA3-BD1A-0DD90778457D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EDCA1FC0-E098-4EF9-927C-7CE23F04C3EB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{EE5DB94D-45E5-482A-A159-C344F1E8A24B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EE93D3CF-A698-4BEF-A8AF-BE691AC76D44}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EFEE5580-7FA3-4263-B909-316763102798}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EFEF6440-7DC7-4CD7-AB9C-986FD729EFDB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F1BA773E-2683-4BBD-BC62-73A7C4EFC3ED}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F1BB8C57-5B26-420F-B74D-4309391BD4FB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F39B99AA-B88F-4DE2-8389-24EE775A9B35}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F415AF46-327F-40D4-8817-D93A23124FF1}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F53E60ED-B344-4FC5-B9BF-5166C88645C4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F826D0FF-55B2-4CA5-876B-EF9479BFF019}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F8E7740B-297B-4F8F-A1D7-4694BEE3E3F8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F94CF411-B890-43A0-BC9C-E42E3E282325}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\3dsmax.exe |
"{F9967DD9-959D-42F6-A488-04EFAD44243B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F9968568-30BA-4D71-89AE-978F3917CF12}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{FA4D1532-BD59-464B-9791-6A18FFF6006C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{FA5FB5C8-63AE-4C42-9467-EA067246AB56}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{FA6C1F14-4F87-437D-8B0E-0C07EBA7713F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{FDA44798-BFF8-4F09-A3EA-6D03D780027D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{FFC50C55-A4FD-4121-A8DA-40D142F25EF1}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{36C8914E-D6BE-460F-93CB-C5B56AFD8B47}C:\program files\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\program files\totalcmd\totalcmd.exe |
"TCP Query User{62732FDD-0D52-4A58-A8CE-2FFD2156B40B}C:\program files\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\program files\totalcmd\totalcmd.exe |
"TCP Query User{9A8618F6-A6D1-4E46-A499-A55E1FE35BF4}C:\users\martin\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\martin\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{A45850AD-8DE9-420C-A4B0-E4EA506146A1}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{CF396635-7256-4F10-9CB1-0C02B772AC60}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{313E9413-622D-4367-98E6-81BB2274661F}C:\users\martin\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\martin\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{644FF844-F741-4F7C-A941-72934439B12D}C:\program files\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\program files\totalcmd\totalcmd.exe |
"UDP Query User{777DCFF5-3F2E-416E-A675-41B5533ED59C}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{E54F23B1-ABB2-4854-874D-21D2FF543DEF}C:\program files\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\program files\totalcmd\totalcmd.exe |
"UDP Query User{E7762CAA-CED5-4D96-838D-84585F9A9757}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0224CACC-994D-45F8-B973-D65056EA9C2F}" = Adobe XMP DVA Panels CS3
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20B6BE33-525B-4EF9-9628-E1BA58093A4C}" = ZBrush 4R2
"{23F79416-CAD1-41BF-99A3-040F6C814AAA}" = NVIDIA Photoshop Plug-ins
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 21
"{26A24AE4-039D-4CA4-87B4-2F83217003FF}" = Java(TM) 7 Update 3
"{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes
"{2C294A0B-DF22-4023-B168-8C7645B10019}" = Adobe Setup
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver
"{3BB2115D-5496-42D5-BCD3-905291A8876F}" = Autodesk MotionBuilder 2011 32-bit
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2012.0.0
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B215C29-1A3E-4736-92AA-10C83FA56EB9}" = Adobe After Effects CS3 Presets
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{6406E3EA-9777-45B7-A0C0-89741E629352}" = Composite 2011
"{67574624-BF0F-0409-AF6D-19FBD86FF7F7}" = Autodesk 3ds Max 2011 32-bit
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{702EC1FF-A081-48AE-8363-8D78A0919F86}" = Autodesk DirectConnect 2010 R1
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7748ac8c-18e3-43bb-959b-088faea16fb2}" = Nero StartSmart
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C9DB71-00EE-483F-9949-3FCED2F517D0}" = MVN Studio
"{857CC5F0-040E-1016-A173-D55ADD80C260}" = Adobe InDesign CS5.5
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A864555-554E-4DE2-BB36-BC4810355525}" = Autodesk MatchMover 2011 32-bit
"{8AF3FB06-BDA3-42A3-995C-308812D2F094}" = Adobe After Effects CS3
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}" = EPU-4 Engine
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_STANDARDR_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_STANDARDR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_STANDARDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_STANDARDR_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_STANDARDR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{91120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}" = MobileMe Control Panel
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{96334581-5554-3E5F-8BC9-924C3C3AC5BE}" = Google Talk Plugin
"{975951E7-14D0-49AF-A630-89680D12D7F6}" = Autodesk Material Library 2011 Medium Image library
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 4.0 beta 1
"{99F80251-DAE8-0409-BD08-DCBBEF56B8CB}" = Autodesk 3ds Max 2011 32-bit Components
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7}" = Adobe Illustrator CS5
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{9F781FAE-0BED-11E1-A311-782BCBACDE13}" = OpenRL Redistributable 1.0 R2 x86
"{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{AC075837-7071-4c07-B9A1-CF5586060FE1}" = Autodesk Maya 2011 English Documentation 32-bit
"{AC76BA86-7AD7-1029-7B44-A95000000001}" = Adobe Reader 9.5.1 - Czech
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 267.24
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 267.24
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B83FC356-B7C0-441F-8A4D-D71E088E7974}" = NVIDIA PhysX
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
"{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library
"{CFB770D7-8D43-1014-922B-CC2715FADE3F}" = Adobe InDesign CS6
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{E4386119-2C33-4023-9836-783F43A90E3C}" = Autodesk Maya 2011 32-bit
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FDB5E0F3-86EA-4379-8A2F-1BC2436543E9}" = iCloud
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_b7dd24a87e82dcf8af8876fd727b7cf" = Adobe After Effects CS3
"Autodesk FBX Plugin 2009.4 - 3ds Max 2010" = Autodesk FBX Plugin 2009.4 - 3ds Max 2010
"Autodesk FBX Plug-in 2011.1 - 3ds Max 2011" = Autodesk FBX Plug-in 2011.1 - 3ds Max 2011
"Autodesk FBX Plug-in 2011.3.1 - Maya 2011" = Autodesk FBX Plug-in 2011.3.1 - Maya 2011
"Avira AntiVir Desktop" = Avira Free Antivirus
"AviSynth" = AviSynth 2.5
"CCleaner" = CCleaner
"FBX Plugin 2006.11.1 for Max 2008" = FBX Plugin 2006.11.1 for Max 2008
"Fences" = Fences
"FormatFactory" = FormatFactory 2.50
"Fotostar Offline client4" = Fotostar Offline client4
"Fraps" = Fraps
"Free Audio CD to MP3 Converter_is1" = Free Audio CD to MP3 Converter version 1.1
"Free Audio Converter_is1" = Free Audio Converter version 1.2
"Free Disc Burner_is1" = Free Disc Burner version 2.4
"Free DVD Video Burner_is1" = Free DVD Video Burner version 2.1
"Free Video to DVD Converter_is1" = Free Video to DVD Converter version 1.2
"GPL Ghostscript 8.70" = GPL Ghostscript 8.70
"GTK 2.0" = GTK+ Runtime 2.14.7 rev a (remove only)
"InstallShield_{20B6BE33-525B-4EF9-9628-E1BA58093A4C}" = ZBrush 4R2
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 15.0.1 (x86 cs)" = Mozilla Firefox 15.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Paymo_is1" = Paymo 3.0.10
"PC Tools Firewall Plus" = PC Tools Firewall Plus 6.0
"Pidgin" = Pidgin
"PSPad editor_is1" = PSPad editor
"PunkBusterSvc" = PunkBuster Services
"RealPlayer 12.0" = RealPlayer
"Riva FLV Encoder 2.0_is1" = Riva FLV Encoder 2.0
"STANDARDR" = Microsoft Office Standard 2007
"Totalcmd" = Total Commander (Remove or Repair)
"VLC media player" = VLC media player 1.1.11
"V-Ray for 3dsmax 2011 for x86" = V-Ray for 3dsmax 2011 for x86
"Wacom Tablet Driver" = Wacom Tablet
"Winamp" = Winamp
"x264vfw" = x264vfw - H.264/MPEG-4 AVC codec (remove only)
"XnView_is1" = XnView 1.96.2
"Xvid Video Codec 1.3.2" = Xvid Video Codec

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 27.7.2011 16:40:43 | Computer Name = lulu | Source = Bonjour Service | ID = 100
Description = 456: ERROR: read_msg errno 10054 (Stávající připojení bylo vynuceně
ukončeno vzdáleným hostitelem.)

Error - 27.7.2011 16:40:43 | Computer Name = lulu | Source = Bonjour Service | ID = 100
Description = 464: ERROR: read_msg errno 10054 (Stávající připojení bylo vynuceně
ukončeno vzdáleným hostitelem.)

Error - 27.7.2011 16:43:14 | Computer Name = lulu | Source = WinMgmt | ID = 10
Description =

Error - 27.7.2011 16:46:01 | Computer Name = lulu | Source = Application Hang | ID = 1002
Description = Program FirewallGUI.exe verze 6.0.0.88 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
c4c Čas spuštění: 01cc4c9dce505dbe Čas ukončení: 6 Cesta k aplikaci: C:\Program Files\PC
Tools Firewall Plus\FirewallGUI.exe ID hlášení: 63fdbb4e-b891-11e0-b796-0026185b5526


Error - 27.7.2011 18:00:11 | Computer Name = lulu | Source = Bonjour Service | ID = 100
Description = 452: ERROR: read_msg errno 10054 (Stávající připojení bylo vynuceně
ukončeno vzdáleným hostitelem.)

Error - 27.7.2011 18:00:11 | Computer Name = lulu | Source = Bonjour Service | ID = 100
Description = 460: ERROR: read_msg errno 10054 (Stávající připojení bylo vynuceně
ukončeno vzdáleným hostitelem.)

Error - 27.7.2011 18:00:11 | Computer Name = lulu | Source = Bonjour Service | ID = 100
Description = 468: ERROR: read_msg errno 10054 (Stávající připojení bylo vynuceně
ukončeno vzdáleným hostitelem.)

Error - 27.7.2011 18:00:11 | Computer Name = lulu | Source = Bonjour Service | ID = 100
Description = 476: ERROR: read_msg errno 10054 (Stávající připojení bylo vynuceně
ukončeno vzdáleným hostitelem.)

Error - 27.7.2011 18:00:11 | Computer Name = lulu | Source = Bonjour Service | ID = 100
Description = 484: ERROR: read_msg errno 10054 (Stávající připojení bylo vynuceně
ukončeno vzdáleným hostitelem.)

Error - 28.7.2011 13:45:50 | Computer Name = lulu | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 17.9.2012 13:57:29 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 13:57:30 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 13:57:32 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 13:57:34 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 13:59:27 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 13:59:29 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 14:00:52 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 14:00:53 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 14:03:05 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 17.9.2012 14:03:07 | Computer Name = lulu | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.


< End of report >

Co ty nelegální produkty od Adobe? Cracky jsou nejlepší cestou k zavirování počítače a navíc tím porušuješ zákony ČR! Naše fórum se nezabývá nelegálními produkty a příště Ti může být pomoc odmítnuta.


Následující soubory otestuj na stránkách VirusTotal.

• C:\ProgramData\KGyGaAvL.sys
  C:\ProgramData\601F66C6FA.sys
• Klikni na [Choose File].
• Soubor nehledej, jen vlož cestu souboru, který chci otestovat.
• Klikni na [Scan it!].
• Pokud na Tebe vyskočí obrazovka podobná té, co je níže, klikni na [Reanalyse]!
  
• Výsledek analýzy mi sem vlož (jako odkaz).

Znovu spusť OTL.

• Pokud používáš operační systém Windows Vista či Windows 7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli, včetně té dvojtečky před Commands!):

• Klikni na tlačítko [Opravit].
• Po dokončení skenu se objeví log, ten mi sem vlož.
• Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

takze nejdrive viry virustotal:

https://www.virustotal.com/file/dc2c325 ... 347991943/
https://www.virustotal.com/file/bb1a81c ... 347992228/

log OTL, nepatricne veci smazany predem

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
Error: Unble to create default HOSTS file!

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: elena

User: martin
->Temp folder emptied: 42516093 bytes
->Temporary Internet Files folder emptied: 23454667 bytes
->Java cache emptied: 5288286 bytes
->FireFox cache emptied: 162824947 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 2964 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1262151 bytes
RecycleBin emptied: 123350241 bytes

Total Files Cleaned = 342.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: elena

User: martin
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb

========== SERVICES/DRIVERS ==========
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service SwitchBoard stopped successfully!
Service SwitchBoard deleted successfully!
Service Nero BackItUp Scheduler 4.0 stopped successfully!
Service Nero BackItUp Scheduler 4.0 deleted successfully!
========== OTL ==========
Service pccsmcfd stopped successfully!
Service pccsmcfd deleted successfully!
File system32\DRIVERS\pccsmcfd.sys not found.
Service CrystalSysInfo stopped successfully!
Service CrystalSysInfo deleted successfully!
File C:\Program Files\MediaCoder\SysInfo.sys not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Internet Explorer\SearchScopes\{48F843C9-E636-4A59-B243-66410B05D9E4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{48F843C9-E636-4A59-B243-66410B05D9E4}\ not found.
Registry key HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ not found.
HKU\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: "YouTube" removed from browser.search.selectedEngine
Prefs.js: {4548ECB8-DA60-439A-A00D-5C893F8E1F9A}:1.0 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=\ deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{4548ECB8-DA60-439A-A00D-5C893F8E1F9A}\defaults\preferences folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{4548ECB8-DA60-439A-A00D-5C893F8E1F9A}\defaults folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{4548ECB8-DA60-439A-A00D-5C893F8E1F9A}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{4548ECB8-DA60-439A-A00D-5C893F8E1F9A} folder moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\seekapp179.xml moved successfully.
Registry value HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{472734EA-242A-422B-ADF8-83D1E48CC825} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825}\ not found.
Registry value HKEY_USERS\S-1-5-21-512755631-3653737577-437137093-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xportovat do aplikace Microsoft Office Excel\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\System32\perfh005.dat moved successfully.
C:\Windows\System32\perfh009.dat moved successfully.
C:\Windows\System32\perfc005.dat moved successfully.
C:\Windows\System32\perfc009.dat moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1392.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2061.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP231.tmp\mscorlib.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP231.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3FA0.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP52B1.tmp\mcstore.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP52B1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E65.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6154.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6818.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7149.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8E3A.tmp\MCESidebarCtrl.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8E3A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8E4A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCB0B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF2D7.tmp folder deleted successfully.
C:\Windows\Installer\MSI2AAE.tmp deleted successfully.
C:\Windows\Installer\MSI3DFF.tmp deleted successfully.
C:\Windows\Installer\MSI5A13.tmp deleted successfully.
C:\Windows\Installer\MSIF0D7.tmp deleted successfully.
C:\Windows\Installer\MSIF0E8.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\924659fb2bc84764c1a94b262ba4b193\BITE35C.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\b67467d1719cf8aedf56ad6c161b5b3b\BIT4365.tmp deleted successfully.
ADS C:\ProgramData\TEMP:B879A65B deleted successfully.
ADS C:\ProgramData\TEMP:A8ADE5D8 deleted successfully.
ADS C:\ProgramData\TEMP:DFC5A2B2 deleted successfully.
ADS C:\ProgramData\Microsoft:2sbD2jNNxi80ib91qoyeUq3CmKEq deleted successfully.
ADS C:\ProgramData\Microsoft:CZqNa8AcbjxxSHfrZ4xptHXCp deleted successfully.
ADS C:\Users\martin\AppData\Local\BUQaQwilyhQp:FhHnLouJjDukMMQGMTP deleted successfully.
ADS C:\ProgramData\TEMP:C31F31E6 deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
File\Folder C:\Martin\``install\Adobe After Effects CS3 Professional\Crack not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS\\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater\\ deleted successfully.

OTL by OldTimer - Version 3.2.61.5 log created on 09182012_214020

Files\Folders moved on Reboot...
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

OK, soubory jsou naštěstí čisté.

Spusť teď počítač v Nouzovém režimu a v něm aplikuj pro OTL ještě níže napsaný script, protože se něco nepovedlo.

Znovu spusť OTL.

• Pokud používáš operační systém Windows Vista či Windows 7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli, včetně té dvojtečky před Commands!):

• Klikni na tlačítko [Opravit].
• Po dokončení skenu se objeví log, ten mi sem vlož.
• Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

All processes killed
========== COMMANDS ==========
Unable to stop System Restore Service. Error code 1084. Restore points not cleared.
Unable to start System Restore Service. Error code 1084. Restore point not created.
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: elena

User: martin
->Temp folder emptied: 112276 bytes
->Temporary Internet Files folder emptied: 75920 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 81365282 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 1013 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 6352 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 1290279206 bytes

Total Files Cleaned = 1 308.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: elena

User: martin
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb

========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.

OTL by OldTimer - Version 3.2.61.5 log created on 09202012_205007

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Super, to už je lepší.

Jak je na tom počítač teď?

Prijde mi to lepsi, urcite procesu ubylo, ikdyz nevim jestli to ma nejakou souvislost.

Takze moc dekuji a chtel jsem se zeptat, jestli nevis o nejakem SW, ktery je urceny na zrychleni pc?

Ano, souvislost to samozřejmě má. Méně spuštěných procesů = menší zátěž počítače a systému = rychlejší výkon, to je logické.

Na tzv. "Zrychlení počítače" je spousta prográmků, ale ani jeden Ti nedoporučím. Jsou to jen podvody a reklamní triky a de facto úplné kraviny. Nic takového si do počítače netahej. Počítač má určité své limity a je nesmysl je nějakým prográmkem překonat. Třeba například takové často instalované Zrychlení Počítače alias PcSpeedUp - klasický případ toho, jak program dělá přesný opak toho, než by měl.
Jediný způsob, jak udržovat svůj počítač v rychlosti je udržovat jej čistý na viry, neinstalovat toolbary, nepřehánět to s programy, které se spouštějí samy při nájezdu systému, čistit jednou za čas registry (nepoužívat ale příliš mnoho prográmků, takový CCleaner je více než dostačující) a pak třeba také provádět občas defragmentace disku. Prostě na počítač nedlabat, ale starat se o něj. Toť vše.

Takže dočistíme a máme hotovo.


OTC http://oldtimer.geekstogo.com/OTC.exe

• Stáhni a spusť.
• Klikni na CleanUp a potvrď YES.
• Program uklidí a může (nemusí) restartovat PC.

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stáhni a spusť.
• Klikni na Start a potvrď OK.
• Program uklidí a může (nemusí) restartovat PC.
• Po použití utilitu smaž.

Pokud nemáš, stáhni CCleaner z tohoto odkazu.

• Panel čistič
• Vše nech jak je, jen dej Analyzovat a poté Spustit CCleaner.

• Panel registry
• Klikni na Hledej problémy.
• Následně na Opravit problémy - zálohu registrů doporučuji udělat, oprav všechny problémy.
• Postup opakuj, dokud nebude bez problémů - většinou cca 3x.

• Panel nástroje
• Zde můžeš odinstalovat nepotřebné programy.

CCleaner doporučuji používat cca jednou za týden.

... a pokud nejsou žádné dotazy, bylo by to z mé strany vše.

diky za rady i servis
vim ze jsem nekam posilal prispevek na forum, ale ted uz si nepamatuju kam, tusim ze to slo pres sms.